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Matthew : 

Attached is the search you requested on the automatic encryption/decryption of 
documents when they are opened/closed. Please let me know if you would like to 
refocus or modify the search in any way. 



Ellen 
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51 387799 (OPEN? OR CHANG? OR EDIT? OR MODIF? OR ACCESS? OR READ? OR 

WRIT?) (ION) (DOCUMENT? OR FILE OR FILES) 

52 1424586 AUTOMATIC? OR AUTO OR (WITHOUT OR NO OR "NOT" OR NON) (3N) (- 

HUMAN OR USER? ? OR OPERATOR?) (3N) (INTERVEN? OR INPUT? OR ACT- 
ION? OR ACTIVIT? OR INITIAT? OR REQUEST? OR COMMAND? OR INSTR- 
UCTION?) OR SUBROUTINE? OR SUB () ROUTINE? 

53 183850 ENCRYPT? OR DECRYPT? OR ENCIPHER? OR DECIPHER? OR ENCYPHER? 

OR DECYPHER? OR CYPHER? OR CIPHER? OR CRYPT? OR SECRET () KEY? ? 
OR KEY () VALUE? ? OR RECRYPT? OR RECIPHER? OR RECYPHER? 



S4 


380 


Sl (S)S2 (5N)S3 








S5 


506 


SI (5N)S2(5N)S3 








S6 


327 


S1(S)S2(3N)S3 








S7 


199 


S6 NOT PD=>980507 








S8 


137 


RD (unique items) 








S9 


265530 


(OPEN? OR CHANG? OR EDIT? OR MODIF? OR 


ACCESS? 


OR 


READ? OR 




CLOSE? OR CLOSING OR WRIT?) (4N) (DOCUMENT? 


OR FILE 


OR 


FILES) 


S10 


229 


S9(S)S2(3N)S3 








Sll 


144 


S10 NOT PD=>980507 








(^1T— 


TT 


RD (unique items TY&ev'.zw&ttTrMes) 









12/3, K/l (Item 1 from file: 16) 

DIALOG (R) File 16:Gale Group PROMT (R) 

(c) 2000 The Gale Group. All rts. reserv. 



05566401 Supplier Number: 48431020 (USE FORMAT 7 FOR FULLTEXT) 
AXENT Enhances Security for the Mobile Professional . 

Business Wire, p04200437 
April 20, 1998 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 788 

Remote Authentication Dial-In User Service (RADIUS) server 
functionality also lets administrators leverage Security Briefcase as the 
single secure remote access server solution and remote access management 
platform. 

--File Encryption: Security Briefcase protects data from 
unauthorized access and thieves by automatically encrypting and 
decrypting sensitive files, enabling busy end users to effortlessly 
protect data stored on laptops. Centralized administration and automated 
updating of the user's security policy ensures... 



12/3, K/2 (Item 2 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2000 The Gale Group. All rts. reserv. 

05489134 Supplier Number: 48316589 (USE FORMAT 7 FOR FULLTEXT) 
Intrasect Technologies Announces docSpace (TM) Direct; Corporations Send 
Files Over the Web with doc Space Direct 

PR Newswire, p225NYW062 
Feb 25, 1998 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 423 

... docSpace Direct "Hot" button. This hyperlinks to the docSpace 

engine. Users then browse their hard drive, select the file, and click 
"Send." The file is automatically encrypted and uploaded into the 
docSpace server. Recipients access the stored file and transaction 
reports by securely logging into docSpace. There is no system 
administration required and all the users need is a simple Web browser with 



12/3, K/3 (Item 3 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 
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05484907 Supplier Number: 48310633 (USE FORMAT 7 FOR FULLTEXT) 
Secure package deliveries . 
PC Week, p006 
Feb 23, 1998 

Language: English Record Type: Fulltext 

Document Type: Magazine/ Journal ; Tabloid; General Trade 

Word Count: 67 

(USE FORMAT 7 FOR FULLTEXT) 
TEXT: 

...on any platform and lets users hyperlink to the docSpace engine, upload 
files from their hard drives to docSpace ! s server and provide Web-browser 
access to the files . Files are automatically encrypted and stored 
in designated folders for download. Pricing is not yet available. 
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DIALOG (R) File 16: Gale Group PROMT (R) 



(c) 2000 The Gale Group.^BLl rts. reserv. 



05479321 Supplier Number: 48303171 {USE FORMAT 7 FOR FULLTEXT) 
DataSAFE File Encryption Privacy Module for CPIC Available at Photodex 
Website; OEM Agreement Adds Encryption for CPIC Users. 

Business Wire, p2190156 
Feb 19, 1998 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 615 

together with Photodex, we have created a simple and secure 
solution to meet the evolving needs of this ever-expanding market." 

Installation of the DataSAFE Encryption Module automatically adds 
a DataSAFE encryption option to the CPIC tool bar. From within CPIC, 
users simply select files to be encrypted, and click on the DataSAFE menu 
option to encrypt... 

...the selected files may be stored on the drive, diskette, or emailed / 
forwarded to any recipient; the recipient needs only the password to 
decrypt and access the files . 

The DataSAFE Encryption Module for CPIC will be available online 
February 19, 1998 through www.photodex.com . The module is only available 
through download from. . . 
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DIALOG (R) File 16: Gale Group PROMT (R) 
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05474065 Supplier Number: 48296139 (USE FORMAT 7 FOR FULLTEXT) 
PC Software 
Computing Canada, p35 
Feb 16, 1998 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal ; Trade 
Word Count: 520 

feature, password entry 
CUPERTINO, Calif. — Symantec Corp. has introduced Norton Your Eyes 
Only 4.1 for Windows NT, providing data protection through features such as 

encryption technology which automatically decrypts files when 
authorized users open them and re-encrypts them when saved or closed. The 
security software uses RSA's public/private key encryption technology. 
In addition, an audit log... 
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05452765 Supplier Number: 48267071 (USE FORMAT 7 FOR FULLTEXT) 
CoSession provides protection 

Edwards, Mark Joseph 
InfoWorld, p42D 
Feb 2, 1998 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal ; Trade 
Word Count: 580 

nifty file-related features are synchronization and cloning, which 
keep files in sync between systems. 

On the security front, CoSession provides access protection via 
passwords, automatic callback, and encryption , with keyboard and mouse 
locking features included for added protection. Users can control a wide 
variety of functionality and features, including limiting which components 
may be used during a session, limiting remote access to the mouse and 
keyboard, restricting remote file and directory access , and mandating 



CoSession-specif ic users^^id passwords. 

CoSession also sports a phone book that makes configuring and 
establishing remote connections a breeze. And CoSession includes... 
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05304374 Supplier Number: 48075272 (USE FORMAT 7 FOR FULLTEXT) 
AXENT Simplifies Security on Windows 95 Laptops and Desktop PCs. 

Business Wire, pl0271094 
Oct 27, 1997 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 839 

system. 

"Many PC security products require end users to manually encrypt and 
decrypt files and make other repetitive actions to ensure the safety of 
their files . Even though laptops are readily stolen and desktop PCs are 
easily accessed, many end users simply don't have the time or the diligence 
to manually secure files every time... 

...PC," said Jim Bowerman, vice president and general manager of AXENT* s 
Resource Management Business Unit. "AXENT 1 s OmniGuard/EAC dramatically 
streamlines these efforts by automatically encrypting and decrypting 
files—working invisibly behind the scenes to continually secure files as 
end users work. " 

EAC/95 v. 1.4 is a powerful security management tool... 
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05301721 Supplier Number: 48071540 (USE FORMAT 7 FOR FULLTEXT) 
UK - Reflex Unveils Real-Time Win NT Encryption Software 10/23/97 

Gold, Steve 
Newsbytes, pN/A 
Oct 23, 1997 

Language: English Record Type: Fulltext 
Document Type: Newswire; General Trade 
Word Count: 44 9 

files saved to the logical drive with the extremely secure Blowfish 
algorithm. 

Provided users have unlocked the encrypted Data Vault drive with the 
correct password, files are automatically decrypted on access . The 
package employs threading techniques to minimize performance overhead and 
works with all file types, including "zipped" archives. As far as users are 
concerned, the... 
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05289125 Supplier Number: 48054410 (USE FORMAT 7 FOR FULLTEXT) 
Security Dynamics 1 RSA SecurPC Wins Network Computing's Editor's Choice 
Award for Best Stored File Encryption Product 

PR Newswire, pl015NEW036 
Oct 15, 1997 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 728 



fulfilling elaborate reporting requirements, or spending additional 



time and resources seekiMp additional U.S. government ap£^B^als. For users, 
RSA SecurPC 2.0 provides^ast , transparent, automatic encryption 

full-time and offers users an intuitive way to protect sensitive data 
through integration with the operating system. Files encrypted with RSA 
SecurPC 2.0 remain encrypted until opened through an application on the 
network and are automatically re-encrypted when the file is closed . 
New boot lock and screen lock features, initiated once, provide users with 
easy, additional security for their portable computers. 
"RSA SecurPC 2.0 offers new... 



12/3, K/10 (Item 10 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 
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05288722 Supplier Number: 48053975 (USE FORMAT 7 FOR FULLTEXT) 
Stored File Encryption: Boiled Eggs And Scrambled Data 

Garden, Philip 

Network Computing, pl22 

Oct 15, 1997 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal; Trade 
Word Count: 3120 

from disk, as BestCrypt NP and Armor 97 do. It instead encrypts and 
decrypts whole files on disk automatically when a valid user attempts to 
open the file . Users are authenticated at logon time, and the 
authentication lasts until the user logs off-tamper-proofing is provided by 
means of screen-locking. Unfortunately, that means opening and closing 
large files is slow going when compared with BestCrypt NP and Armor 97, 
and the system is arguably less secure for short periods. The product also 
supports only smart folders, which are automatic encryption and 
decryption solutions, on local drives. If you want to encrypt files on a 
server, you must do it manually by selecting one or more files and. . . 
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DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2000 The Gale Group. All rts. reserv. 

05243729 Supplier Number: 47994046 (USE FORMAT 7 FOR FULLTEXT) 
Self-Escrow Desktop Encryption 

Yasin, Rutrell 
InternetWeek, pi 4 
Sept 22, 1997 

Language: English Record Type: Fulltext 
Document Type: Newsletter; Trade 
Word Count : 169 

(USE FORMAT 7 FOR FULLTEXT) 
TEXT: 

...data are held by corporate officers who can make them available to law 
enforcement agencies with court orders, Sizer said. With RSA SecurPC 2.0, 
files remain encrypted until opened through an application on the 
network. They are automatically re-encrypted when closed. Available 
nowon Windows 95, RSA SecurPC 2.0 costs $59. 
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DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2000 The Gale Group. All rts. reserv. 

05238537 Supplier Number: 47986948 (USE FORMAT 7 FOR FULLTEXT) 
Security Dynamics 1 RSA SecurPC 2.0 Receives Approval for International 
Export 

PR Newswire, p917NYW019 
Sept 17, 1997 

Language: English Record Type: Fulltext 



Document Type: Newswire/^Brade 

Word Count: 988 



... SecurPC 2.0 will enable secure communication with companies based 

outside the U.S. and Canada. 

For users, RSA SecurPC 2.0 provides fast, transparent, automatic 
encryption full-time and offers users an intuitive way to protect 
sensitive data through integration with the operating system. Files 
encrypted with RSA SecurPC 2.0 remain encrypted until opened through an 
application on the network and are automatically re-encrypted when the 
file is closed . New boot lock and screen lock features, initiated once, 
provide users with easy, additional security for their portable computers. 

Likewise, RSA SecurPC 2.0 enables... 



12/3, K/13 (Item 13 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 
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04528986 Supplier Number: 46654211 (USE FORMAT 7 FOR FULLTEXT) 
Encryption at your service 
PC Week, p025 
August 26, 1996 

Language: English Record Type: Fulltext 

Document Type: Magazine/ Journal ; Tabloid; General Trade 

Word Count : 475 

... the Internet. The recipient will not be required to have WebCrypto 

to open the file. 

NetCrypto requires all users to have the application running to open 
encrypted files . The application runs in the background on client 
desktops, with files automatically encrypted before being sent over the 
Internet . 

VirusScan also runs in the background on a PC and automatically scans 
for viruses on the behalf of users... 
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DIALOG (R) File 16: Gale Group PROMT (R) 
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04477368 Supplier Number: 46572616 (USE FORMAT 7 FOR FULLTEXT } 

SYMANTEC ANNOUNCES STRONG GROWTH IN CORE PRODUCTS FOR THE JUNE 1996 QUARTER 

PR Newswire, p0725SFTH041 
July 25, 1996 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 178 6 

... contact management. 

Symantec announced Norton Your Eyes Only for Windows 95. Norton Your 
Eyes Only provides data protection through features such as "on-the-f ly" 
encryption technology, that automatically decrypts files when 
authorized users open them and re-encrypts them when saved or closed. 
With the Internet used increasingly for sending confidential information, 
this feature is necessary to prevent unauthorized. . . 
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DIALOG (R) File 16: Gale Group PROMT (R) 
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04440626 Supplier Number: 46517324 (USE FORMAT 7 FOR FULLTEXT) 
Psstt! Security Designed For Your Eyes Only 

Network Computing, p54 
July 1, 1996 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal; Trade 



Word Count: 1122 



... your hard drive (new or current) as a SmartLock folder. Files 

already existing in this folder, and any new files added to this directory 
are automatically encrypted . If you try to access one of these files 
, it is automatically decrypted and presented to you. If another user 
tries to access this file and has not logged into Your Eyes Only at 
boot-up time, then the file appears as garbage data and the application 
trying to access the file will report an error. 

When you encrypt any file or folder, you can select which user's 
public keys will be on the recipients list... 



12/3,K/16 (Item 16 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 
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04410277 Supplier Number: 4 6470352 (USE FORMAT 7 FOR FULLTEXT) 
Your Eyes Only for Win 95 to ship — Symantec Tightens Security 

Computer Reseller News, n688, p086 
June 17, 1996 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal ; Trade 
Word Count: 156 

The product features "on-the-fly M encryption technology that 
automatically decrypts files when the authorized user opens them, 
then re-encrypts the files when saved or closed , company officials 
said. A SmartLock feature provides automatic encryption . Thus, users 
do not have to remember commands . 

Norton Your Eyes Only uses RSA Data Security's public key/private key 
encryption technology. The product also provides an optional bootup access 
control feature. . . 



12/3, K/17 (Item 17 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2000 The Gale Group. All rts. reserv. 

04390817 Supplier Number: 46440880 (USE FORMAT 7 FOR FULLTEXT) 
SYMANTEC ANNOUNCES NORTON YOUR EYES ONLY FOR WINDOWS 95 

PR Newswire, p603SJM007 
June 3, 1996 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 890 

... Nasdaq: SYMC) today announced Norton Your Eyes Only for Windows 95. 

Norton Your Eyes Only provides data protection through features such as 
"on-the-fly" encryption technology, that automatically decrypts 
files when authorized users open them and re- encrypts them when saved 
or closed. With the Internet used increasingly for sending confidential 
information, this feature is necessary to prevent unauthorized. . . 

. . .protect information on the computer or over the Internet becomes of 
utmost importance." 

Foolproof Protection 

Norton Your Eyes Only offers SmartLock, transparent "on-the-fly" 
encryption technology which automatically decrypts files when 
authorized users open them and re-encrypts them when saved or closed. 
Since this functionality is automatic, users do not have to remember to do 
these tasks and. . . 
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02122877 Supplier Nun^P:: 42753680 (USE FORMAT 7 FOR^^LTEXT) 

PC Security offers starter kit 

Computer Product Update, pN/A 
Feb 15, 1992 

Language: English Record Type: Fulltext 
Document Type: Magazine/Journal; Trade 
Word Count: 267 

Starter Kit are independently certified under the UK government 
CLEF/ITSEC scheme. 

The security system can be upgraded to include software-based features 
such as file access control, audit trail, automatic file encryption 
. Hardware-based features including tokens and smartcards are also 
available. Further virus defences are available. Security and virus 
protection can be managed through a central... 



12/3, K/19 (Item 1 from file: 160) 

DIALOG (R) File 160: Gale Group PROMT (R) 

(c) 1999 The Gale Group. All rts. reserv. 

02271616 

RAINBOW TECHNOLOGIES ANNOUNCES NEW GENERATION SECURITY SYSTEM: DATASENTRY 
II PROTECTS SENSITIVE DATA ON PCs, LAPTOPS 

News Release April 26, 1989 p. 1 

. . . hardware keys for software and data protection on IBM and Apple 
Macintosh personal computers, has introduced the enhanced "DataSentry II" 
security system to protect PC files from unauthorized access , here at 
the Federal Computer Conference (FCC) (Booth #251) . The low-cost DataSentry 
II security system, an enhanced version of Rainbow's DataSentry I system... 

... transmissions. The DataSentry II system can also work in a multi level 
mode so that a department manager's DataSentry II Personal Access Key can 

access any staff member's files or the manager can assign them to 
another person witha different Personal Access Key. In a large organizatin, 
several department managers may come under a common director who has a 
higher level DataSentry II master key able to access files from any of 
the departments. Modem transmissions are secured by using two or more keys 
programmed with the same security algorithm and installed in PCs... 

. . . is received for complete transmission security. Encryption and 
decryption of files can be automatic and totaly transparent to the user. 
The DataSentry II' s sophisticated automatic encryption protection keeps 
files s ealed at all times within selected directories. The user also has 
the ability to protect files manually using selectable SEAL and. . . 



12/3,K/20 (Item 2 from file: 160) 

DIALOG (R) File 160: Gale Group PROMT (R) 

(c) 1999 The Gale Group. All rts. reserv. 

01476476 

MAGNA COMPUTER CORPORATION TARGETS IBM PC/XT/AT MARKETPLACE WITH NEW 
PRODUCT ANNOUNCEMENT. 

NEWS RELEASE (FOR FURTHER INFORMATION APPLY TO COMPANY INDEXED) June 23, 
1986 p. 12 

... box controller. The unique MAGNA developed back-up software utility 
provides an easy- to-use menu-driven system featuring full and partial disk 
back-up, modified file back-up, back-up to and from any disk/diskette 
drive, and file count with error check during back-up procedure. A special 
feature of . . . 

...of the IBM PC system unit. Of particular interest to security conscious 
users is the data encryption option. All data transmitted from the cpu is 
automatically encrypted before transmission to the Winchester disk 

drive. Data being transmitted from the Winchester disk drive to the cpu is 



decrypted during transmi^B.on to the cpu. 
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08940696 SUPPLIER NUMBER: 18624642 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Encryption at your service. (HP licenses Northern Telecom's Entrust digital 
certificate software, and McAfee Associates develops the Secure-1 
security software for the Internet) (Company Business and Marketing) 

Moeller, Michael 

PC Week, vl3, n34, p25(2) 

August 26, 1996 

ISSN: 0740-1604 LANGUAGE: English RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 500 LINE COUNT: 0004 5 

the Internet. The recipient will not be required to have WebCrypto 
to open the file. 

NetCrypto requires all users to have the application running to open 
encrypted files . The application runs in the background on client 
desktops, with files automatically encrypted before being sent over the 
Internet . 

VirusScan also runs in the background on a PC and automatically scans 
for viruses on the behalf of users. . . 
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Empower Professional 5.0 Provides Powerful Macintosh Security Software. 

Business Wire, p8080020 
August 8, 1995 

LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 4 30 LINE COUNT: 0004 8 

... new easy-to-use graphic interface, Empower Professional 5.0 

provides all of the features of Magna ' s Empower version 5.0 security 
software, plus file and folder level access controls, optional guest 
access privileges, copy protection for files and applications, and 
optional automatic encryption . Empower Professional 5.0 also provides 
Desktop Trash Can controls. For individuals and computer networks with more 
simple security requirements, non-customized default settings can... 
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New Secure E-Mail for Microsoft Mail Users; Stoplock V Security Software 
Now Offers an Add-On Secure E-Mail Option. 

Business Wire, p7191017 
July 19, 1995 

LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 362 LINE COUNT: 00040 

Its modular design means that it works across operating system 
platforms and interfaces to third party security products. -0- 

Stoplock V features include: — System, device, file , application 
and directory access control -- Drive A: boot protection -- SoftHold 
(screen blanking) -- System and User Auditing — Enhanced Device Protection 
— inhibits the use of low level utilities — Data encryption and key 
management -- Automatic file encryption through the AutoEncrypt feature 
-- Unlimited number of users -0- 

Other features include secure data transfer, and a Secure Client 



Interface (SCI) faciliti^Has well as. 
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07697488 SUPPLIER NUMBER: 16407021 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

AT&T AND IRE LINK SECURE REMOTE ACCESS PRODUCTS 

PR Newswire, p0203DC003 
Feb 3, 1995 

LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
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user action, dsaSign and the AX400 create a random one-time 
password which is signed using DSS, guaranteeing that only the authorized 
user can gain access to the system. Files from users can also be 
digitally signed to provide undeniable proof of the identity of the message 
sender and to prevent modification of the data. In addition, the AX400 
automatically encrypts the user's data using the Data Encryption 
Standard (DES) which prevents unauthorized parties from stealing sensitive 
information . 

"The AT&T-IRE product combination is... 
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Rating employees just got easier. (Austin-Hayne Corp f s Employee Appraiser 

2.01 and Avantos Performance Systems Inc ' s Review Writer) (Software 

Review) (Evaluation) 

Frazier, William M. 

Government Computer News, vl3, n23, p32(2) 
Oct 17, 1994 
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RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 1142 LINE COUNT: 00096 

... then click the mouse on OK. There's only one disk. A couple of 

minutes later, you'll be writing your first appraisal. 

The program documentation is small enough to read in one sitting, 
just 90 pages with a table of contents and index. I found no obvious 
errors, but there were omissions. For example, I found it difficult to 
decipher how automatically to insert header text in modified appraisal 
templates. I eventually found the information in a text file on the 
distribution disk. 

On-line help is... 
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New apps, updates boost security. (usrEZ Software Inc 1 s ultraSecure 3.52 

and SmartStuff Software's FoolProof Desktop Security 2.0 security 

software) (Brief Article) (Product Announcement) 

Hess, Robert 
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Sept 26, 1994 
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... Standard (DES) encryption and a new administrative level. 

ultraSecure 3.52 can track the activities of users logged onto a 



file-sharing server, inc^^ding which files they open , (tf^ete or copy. 
Because the upgrade incorporates triple DES at the Finder level, usrEZ 
said, anything dropped into folders marked as secure will be encrypted 
automatically . 

A new Master Administrator security level lets administrators define 
settings for all computers at a site. The upgrade also supports IDE 
(Integrated Drive Electronics) disks... 
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...ABSTRACT: password, an encryption key is built for storing in server 
memory. User's home directory will have a private directory the files of 
which are automatically encrypted . The same encryption key 
automatically decrypts any files opened . The system administrator 
and individual users can both flag files for compression. 
NetSqueeze+Encryption shows compression ratios through command-line 
utilities. LAN Support Group priced... 

... be held in server memory. A private directory within the user's 

home directory is flagged so that any files saved to the private directory 
automatically are encrypted by the encryption key. Any files opened 
are decrypted automatically by the same key. 

When the user logs off, the encryption key is wiped from the server 
memory. Each time users log in, they must... 
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Safety Suite offers package of protection for Mac users: Claris product 
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Article) (Product Announcement) 
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... folders or files. It works seamlessly so that when a user 

double-clicks on an encrypted file, it prompts for the password, then 
unencrypts the document . When the document is closed , it is re- 
encrypted automatically . 

Shredder offers one-, two-, or three-pass byte-by-byte data wipeouts. 

Disk Locker password-protects the entire hard disk or even external 
drives, and. . . 
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Novell casts a wider net. (Novell Inc. 's NetWare version 4.0 network 



operating system) (incli^^ related articles on cooperat^p between Novell 
and Banyan Systems Inc., Novell's wide-area network strategy, and Novell 
Pres and CEO Raymond J. Noorda) (Cover Story) 
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... in once to the entire network, instead of having to log in to the 

local server and then to a remote server when wishing to access a file 
stored on that remote system. There are still two log-ins but the second 
one is invisible to the user. When a remote server must be accessed, NDS 
automatically generates an encrypted log-in and set of access 
parameters. There are transmitted across the network to the remote server, 
where, if the log-in has been granted authorization to see information or 
change a file , NDS opens that file to the user. 

As the technical basis for this transparent verification Novell 
licenses a private and public encryption system from RSA Data Security Inc. 
of . . . 
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Norton Utilities for Mac 2.0: a winner; Symantec enhances find routing, 
adds backup module. (Symantec Corp. 's file management software for 
Apple's Macintosh microcomputer) (Software Review) (PC Week Labs First 
Look) (Evaluation) 

Bethoney, Herb 
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... the DES encryption option, in 13.2 seconds. Encrypt requires a 

password to encrypt and decrypt a file, a folder or a whole disk. To open 
the encrypted file , PC Week Labs double-clicked on the file and supplied 
the password, and the program automatically decrypted the file. 

Now that SUM II has been incorporated into NUM 2.0, Symantec is 
dropping the package from its line; registered NUM 1.1... 
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... under Big Blue's Systems Application Architecture { SAA) standard. 

Differing only in terms of the type of data encryption offered, both 
versions of Triumph! feature automatic encryption , multiple levels of 
user authorization, file -level access control and compatibility with 
most LANs. A Windows version is scheduled for the 
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506-9800. 

Fisher International Systems will show the updated, $295 Watchdog 6.0 
security package for IBM PCs and compatibles. Features include password 
access control; encryption algorithms for automatic and transparent 
data encryption ; multiple file permission levels -- execute, read , 
write , create, delete and MS-DOS access; audit trails; and control of 
hard-drive utilities. 

Fisher International Systems Corp., 4073 Merchantile Ave., Naples 
Fla. 33942; tel. . . 
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procedure using an owner identifier and password provides a second 
level of security. 

A third level of security is provided by a proprietary algorithm to 
automatically encrypt /decrypt data files and sub-directories on 
individual PCs. Only the owner of that key, or his or her manager holding a 
master key, can decrypt, or open , the files protected in this manner. 
In fact, this encrypting/decrypting process is completely invisible to the 
key owner as the data displayed is always in clear... 
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Downsizing accounting applications: data integrity is key consideration 

when downsizing to PC based LANs, (includes related article on guides to 

selecting accounting packages) (buyers guide) 

Dayton, Doug 
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. . .ABSTRACT: the expense of overall system performance, but most users are 
willing to put up with the performance decrease caused by password 
security, validation, data checking, automatic recovery and file 
encryption . A LAN accounting system must maintain a multilevel DBMS 
architecture that is fault-tolerant; distributed client /server systems 
provide physical, logical, process and media fault tolerance. Most network 
accounting systems include security features such as encryption systems 
encrypt data files to protect against unauthorized access and let 
network administrators perform audits to monitor user access. Specific 



products are discussed. 
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option to encrypt selected files in Data Encryption Standard (DES) 
format. Empower II already includes the DES option, in addition to a 
proprietary algorithm that automatically encrypts data files as they 
are written to disk and transparently decrypts them when they are opened 
by a user with access privileges. 

Empower I and II versions 4.0 will retain... 
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. . . procedure using an owner identifier and password provides a second 

level of security. 

A third level of security is provided by a proprietary algorithm to 
automatically encrypt /decrypt data files and sub-directories on 
individual PCs. Only the owner of the key, or his or her manager holding a 
master key, can decrypt, or open , the files protected in this manner. 
In fact, this encrypting/decrypting process is completely invisible to the 
key owner as the data displayed is always in clear... 
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Crimes toppers . (Software Review) (Visitec PC Boot, Computer Security PC 
Guard, PC Security Stoplock IV security software) (evaluation) 
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... different in implementation, to that of Stoplock' s. It consists of 

a battery-backed card and a security environment that controls user names 
and passwords, auto or manual file encryption and access to the 
serial, parallel and floppy disk devices. 

Unlike Stoplock, though, PCBoot offers no specific protection for 
floppy disk-based programs and data, apart from. . . 
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Three ways to protect high-tech investments: trio of backup software 
packages protects against loss of data. (SoftSafe from Software 
Directions Inc. , Protec from Sophco Inc. and Watchdog from Fischer 
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... of four logically-defined user columns, by highlighting it with the 

cursor. The user is then asked for the corresponding password in order to 
gain access to the system. 

Confidential files can be stored in private subdirectories which 
are not accessible by other users. However, automatic encryption of 
these files is not an integral feature. Encryption is manually activated by 
default, while automatic encryption requires a separate, somewhat 
cryptic procedure that is not part of the initial installation. 

Restricted access to floppy diskette drives is provided as part of. . . 
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ISAC's encryption features keep lock on files. (Software Review) (Isolation 
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... on the computer is carried out exactly the same way as under normal 

MS-DOS operation. There may be a slight performance drop during any read / 
write operation because every file now is encrypted and decrypted 
automatically each time it is accessed. 

The ISAC system adds extra system files to every encrypted disk, 
encrypting the File Allocation Table and the directory. 

The. . . 
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Performance still suffers with dBase IV for LANs. (Local area networks) 
(Software Review) (evaluation) 

Stephenson, Peter 
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fair amount of security is built into dBase IV when PROTECT is 
invoked. The levels of security available are global access to dBase IV, 
specific access to data files and fields and automatic encryption 



and decryption of data. 

DBase IV for LANs Has a long way to go in terms of performance and 
use of resources. Although this is a new... 
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Hardware and software keep your PC data safe. 

Terry, Chris 
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such as reading, changing, or deleting data files or formatting the 
disk to destroy all data . 

A software package that erects effective barriers against 
unauthorized access to the files stored in a shared PC is Fischer's 
Watchdog ($295) . On IBM PCs or compatibles, software-protection packages 
are usually installed on the hard disk. . . 

...for the system, for each directory area, and for each user. He can also 
designate certain directory areas as "secure;" files in secure areas are 
automatically encrypted , using the company's proprietary encryption 
algorithm. 

Furthermore, Watchdog can deny such dangerous commands as FORMAT to 
all except the most privileged user. As an... 
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. . . the system concurrently. Security features of purchased, special 

software, designed to protect PCs from unauthorized use, should include 
passwords to access the computer and restrict access to files and/ or 
programs to specific authorized individuals. More advanced features will 
create log files of system use and automatically encrypt and decrypt 
files . 

Access Control Software 

There are presently numerous aids to provide safe and effective 
microcomputer logging. Examples of such aids are Watchdog from Fischer 
International Systems, Lockit . . . 
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...ABSTRACT: Computer S^Brity Act of 1987 mandates that^J 1992, a 
computer system or network must be certifiable as secure in four areas: 
user identification/authentication, access control and file security, 
transmission security and management security. In response to these federal 
requirements, local area network (LAN) vendors are developing software that 
support central data bases of users with associated access rights data. An 
example of a secure product is Digital Communications Associates* lONet 
Secure LAN. The product offers transparent, automatic encryption and 
decryption using the ANSI Data Encryption Standard and the Federal 
Information Processing Standard. 
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... disk operations. 

A secret disk drive is a virtual disk drive controlled by a DOS 
device driver. A secret disk is stored as a hidden, read /only, system 
file stored in the root directory of a hard or floppy disk. Secret disks 
are analogous to floppy disks: when a secret disk is inserted into a secret 
drive, the device driver interacts with the hidden file just as if it were 
a disk. In addition, the driver encrypts and decrypts all data 
automatically as it is written to and read from the secret disk. 

To access a file on a secret disk, one must first run the SuperDisk 
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... a laptop, which in my mind is a big step forward." 

The Compsec-II-G15 module, the cartridge equivalent of an IBM AT 
half-card, automatically encrypts files on SAVE and READ functions. 
Users log on with personal start-up files and can be prevented from 
accessing the laptop during certain time periods. 

The security system guards... 
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... a major new feature that gives users the option of preventing 

start-up of the Mac from all floppy disk drives. Empower is a Startup 
document (INIT) that provides AppleSharestyle access restrictions and 
automatic encryption and decryption . 

Magna is located at 2540 N. First St., Suite 302, San Jose, Calif. 
95131; (408) 433-5467. 
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... NetWare's operating environment. Immediate customer benefits 

include: a common login for the PC and the local area network; a common, 
secure method of controlling file access based around Micronyx 1 
encryption technology; automatic encryption of all data transferred 
between the PC and file server; and the ability to centrally administer 
security devices attached to the network's file server... 
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foremost PC data security program used in both 
the business and Government markets. It effectively integrates 
security features such as ID and password access control; automatic 
data encryption which is transparent to users; multiple file 
access 

levels; multiple user permission levels; and audit trails for logging 
all system and user activity. The program can be used on the IBM PC 
XT. . . 
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TEXT: 

...Remote Authentication Dial-in User Service (RADIUS) server functionality 
also lets administrators leverage Security Briefcase as the single Secure 



remote access server sol^J^on and remote access manageme^^platf orra. 
File Encryption: Security Briefcase protects data from unauthorised access 
and thieves by automatically encrypting and decrypting sensitive 
files, enabling busy end users to effortlessly protect data stored on 
laptops. Centralised administration and automated updating of the user's 
security policy ensures... 
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. . . offers the easiest and most seamless PC protection available for 

organisations with hundreds of Windows NT systems. 

PCShield uses AXENT ' s proven IntelliCrypt technology to automatically 
encrypt and decrypt information for end users running Windows 95 or 
NT. According to installation-specific rules, the IntelliCrypt system 
automatically protects newly created files from unauthorised access 
anywhere they are created or saved. This non-invasive protection remains 
with the file wherever it goes, anywhere on the network. The end user need 
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. . . files saved to the logical drive with the extremely secure Blowfish 

algorithm. Provided users have unlocked the encrypted Data Vault drive with 
the correct password, files are automatically decrypted on access . 
The package employs threading techniques to minimise performance overhead 
and works with all file types, including "zipped" archives. As far as users 
are concerned, the... 
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which manages and backs up data via an ISDN or normal telephone 
lines, storing it safely in an off-site data vault. Overnight new and 



changed files are aut^^tically encrypted and compr^P^ed before 
transmission to the SBS repository where all versions of backed up files 
are held on-line on mirrored optical disks. Because it... 
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disk encryption system for Windows NT. SeNTry 2020 is designed to 
create a virtual drive which is completely transparent to the user so that 
all files written to the virtual drive are automatically encrypted 
and can only be decrypted by the authorised user with the correct password. 
SeNTry 2020 can be used on any amount of networked PCs and. . . 
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. . . 160-bit cyphering systems, SeNTry 2020 creates a virtual drive {an 

encrypted file on the hard disk) which is completely transparent to the 
user. All files written to the virtual drive are automatically 
encrypted and can only be decrypted by the authorised user with the 
correct password. (The encrypted drives are secured by randomly generated 
1024-bit keys. ) All. . . 
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... v2 . 0 features a configuration wizard, an installation toolkit, 

increased efficiency, improved network performance, enhanced password 
checking, a high level of information protection, a system access 
control, audit functions, file and application controls, enhanced boot 
protection and automatic file encryption . Stoplock 95 v2 . 0 is now 
available for a single user list price of GBP195. 
COPYRIGHT 1997 M2 Communications 
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PC adds "C2 level" security to DOS, Windows 3.x, and Windows 95 
desktop and notebook computers. EAC/PC security features include boot 
protection, discretionary access controls, automatic and transparent 
file encryption , secure deletion, auditing, and centralized user 
administration . 

Pricing has been set at $1,995 for the ESM for NT Manager, $995 for 
the ESM agent . . . 
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... Encryptor allows users to create a password-protected virtual' di 

drive of up to 2.0GB capacity. Users simply select a suitable drive name, 
and encryption is performed automatically and transparently. Data 
Encryptor 's symmetrical encryption technique automatically encrypts 
anything saved to the virtual drive (including zipped' archives), and 
decrypts it on access. There's no need to select individual files either 
for writing to, or reading from, the virtual disk. 

Running Data Encryptor does not incur significant performance 
overhead, and its 64-bit key encryption technology is far... 
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Private Folder can be used by virtually any size of user base or 

company. 

When files are entered into a user-defined folder they are 
automatically encrypted . This means that users wanting access to them 
must identify themselves by name and password. If dual access is required 
folders can be created that allows files to be read by a combination of 
users. Prior to the launch of Private Folder, this facility was not 
available on the PC market in such a simple. . . 
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addition to the multi-layered solution. Reflex have developed a 
virtual drive using a device driver which means that the encryption is 
performed transparently. As files are accessed they are automatically 

encrypted and decrypted . The drive is secured through password and two 
powerful ciphering systems with 64-bit keys, thus protecting confidential 
data even if a PC is stolen. . . 
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TEXT: 

...over the previous versions include: Key-holder file sharing, enhanced 
key management and new installation. Key-holder file sharing allows several 
key-holders to share access to individual encrypted files . Shared 
access to encrypted data requires each user to know the encryption key. 
Users key databases are now automatically encrypted and password 
protected. The use of 'immediate 1 keys (i.e. keys not stored in a database) 
has been extended and made more secure. The installation... 
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are the implications of TNFS? First and foremost, the new file 
system should enable Digital to address some of the shortcomings inherent 
in the existing OpenVMS file system. For example, to enable transparent 
file interoperability across multiple platforms, TNFS may include a file 
naming system that provides consistent, unique mapping for filenames... 

...locate the file at its new address. This capability is deemed a 
prerequisite to Digital's planned File Shelving and Media Management 
utilities. Provisions for automatic encrypt-on -write /decrypt -on- 
read , file -level password protection, and automatic data compression 
also are among potential TNFS features. 

Finally, while the step-by-step "phased deployment" of OpenVMS 
operating system. . . 
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right-click on a file or folder and choose Encrypt. Your files are 
encrypted using the DES algorithm and your private key. Your files are 
automatically decrypted when loaded into your applications, provided you 
are the one accessing the files . Other users cannot decrypt your files 

or read your data. This transparency is possible because EFS is 
implemented as a file system driver that sits between the I/O Manager and 
the NTFS. . . 
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... t even know YEO is there; the only telltale sign is that opening 

large files takes a few seconds. 

The program's SmartLock folders are automatically decrypted when 
opened and encrypted when closed. We set up a directory of encrypted .DOC 
files and accessed them with Microsoft Word without having to decrypt 
them first. If someone tries to view the files without logging on to YEO, 
the files stay... PGP works with Clipboard text — the only product of the 
four we looked at that could. 

When you encrypt or decrypt material, the results are written to a 
temporary file and displayed in a viewer. Notepad is the default editor, 
but you can specify any Windows text editor. And you can augment security 
by automatically compressing files before encryption . When PGP encrypts 
a file, it creates a new file with an .ASC extension; the user can set the 
program to delete the original. 

After. . . 
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...ABSTRACT: enhanced forms-design and browsing tools. Each database is 
stored as three files: a data dictionary, the actual data and the indexes. 
Database files are automatically encrypted and cannot be accessed 
without R: BASE itself or a compatible utility. The program imports and 
exports ASCII, DBF and WKS files and includes direct support for access 
to DBF Files . R:BASE has a powerful native command language based on an 
enhanced version of SQL. A Smart Query Optimizer improves query speed using 
statistical and. . . 
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. . . dBASE still provides a high level of security compared with other 

PC-based packages. With the PROTECT command, the administrator can assign 
system log-ons, file -level and field-level access , and automatic data 

encryption . In SQL Mode, the administrator can use standard SQL GRANT and 
REVOKE commands 
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. . . 249 comprehensive security product from ASD Software, has long been 

a favorite of MacUser editors. If offers tremendous ease of use, almost 
totally transparent operation {automatic encryption , for example) , and 
the convenience of adding its own menu to the menu bar. FileGuard the 
administrator create users and groups, set folder/file access , and 
enable or disable most activities for individual users (see Figure 4). It 
also lets you copy-protect applications, so pirated copies won't work... 
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. . . when first using the computer. This approach requires some 

preparation and an administrator responsible for maintaining the user list 
and assigning passwords. 

In terms of encryption , FileGuard automatically asks if you want 
to encrypt a file when you first save it from within the creating program. 
There is no need to start up. . . 

...then process files (except for files created before you installed 
FileGuard). Files can also be locked or made invisible. FileGuard does not 
support DES. You open encrypted files by double-clicking and entering a 
password. The program maintains adetailed user log for each file. 

In addition to file and drive protection, FileGuard boasts... 
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... to start you wondering.) 

If data security is really what you are aiming for, you might 
consider purchasing a security program that will protect your files from 
unauthorized access . A new product on the market that provides security 
for your files is SoftSafe from Software Directions (1572 Sussex Tpk., 
Randolph, NJ 07869; (201) 584-8466) . SoftSafe automatically encrypts 
data stored in secured directories and has the ability to lock the keyboard 
of an unattended computer. SoftSafe uses passwords to identify users, 
allowing only. . . 
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s data-security software for the IBM PC and PS/2 models and 
compatibles is available. Watchdog 5.0 integrates ID and password access 
control, automatic data encryption transparent to users, multiple file 
-access and user-permission levels, and audit trails for logging all 
system and user activity. Version 5.0 features an execute-permission option 
that allows users... 
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... another. That way the thief or tamperer won't be able to sneak a 

board off the premises for decoding. 

Most software programs encrypt your file after you've written it. 
Some hardware also encrypts on a file level, but because encryption on 
chips take so little time, they can encrypt and decrypt "on the fly." With 
this system, every time your program writes to disk, the data is 
automatically encrypted , an every time it reads from disk, the data is 
decrypted. This method is obviously more secure than writing a normal 
file out to disk, encrypting it, and then decrypting the whole thing when 
you want to work on it. With integral encryption, the only time the... 
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. . . good way to prevent employees from pirating software. 

If you're really worried about data security, you can set up Protec 
so that it encrypts files as it writes them. They are never on disk as 
plain text; they have to be decrypted automatically when they are read. 
Setting up this feature requires some sophistication and patience, and 
unfortunately the manual's explanation is not as clear as it... all you 
need, since HFTools is capable of only a few vital security functions. 

HFTools is not a DOS shell. It lacks e-mail, audit files , 
automatic encryption , restricted DOS access , or any of that fancy 
stuff. It's simply a small utility that hides files or directories from 
DOS. When you want to work with. . . 
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...ABSTRACT: a password before encrypting any files. There is a useful 
AutoCrypt feature that lets the user define sets of files, directories and 
folders that are automatically encrypted and decrypted at startup or 
shutdown, SecurPC does not handle E-mail, and its private-key technology 
demands a secure channel. Administrators can recover encrypted files if a 
user loses a password or preference files with the Emergency Access 
key, which can be split into parts to require multiple trustees. 
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... password before you can access encrypted files. 

You can designate any Windows 95 folder as a SmartLock folder. After 
you do so, Your Eyes Only automatically encrypts and decrypts files 
stored there when you open and close them with your regular applications. 
You can also encrypt individual files located in any folder. A thief could 
move those files , but could not read them without a password. 

To encrypt files or folders, you right-click on them in Windows 
Explorer and use options that appear in the pop. . . 
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At Seybold Seminars New York last spring, we found Magnetic Press 
showing an Acrobat plug-in called KeyChain, which automatically managed 
the encryption keys for protected PDF documents (Vol. 1, No. 9). The 
KeyChain creator tool encrypts a file and places a Digital Object 
Identifier (DOI) in the file header. Later, the reader tool uses the 
DOI to find the right decryption key, either on your local disk or on a 
commerce server on the Net. 
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files saved to the logical drive with the extremely secure Blowfish 
algorithm. 

Provided users have unlocked the encrypted Data Vault drive with the 
correct password, files are automatically decrypted on access . The 
package employs threading techniques to minimize performance overhead and 
works with all file types, including "zipped" archives. As far as users are 
concerned, the. . . 
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... default in the quarantine area, pending an administrator's approval 

to let them go. Unfortunately, MailGuard has a chink in its armor: It can't 

open encrypted files for scanning. And there's no way to modify this 
procedure. You do, however, have the unattractive option of automatically 
passing through encrypted attachments without scanning them. 

We configured MailGuard from its IMS Console screen, which we accessed 
from the Control Panel, and we set up its logging. . . 
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choose a password, and select the files that you <v want encrypted. 
Now, unless you have the password to the file, all you see when the 
file opens is a bunch of garbage characters. Your Eyes Only supports 
"on-the-f ly" encryp- tion; files are automatically decrypted when 
authorized users open them and re-encrypted when the files are saved or 
closed . 

Your Eyes Only integrates with Windows 95 Explorer and makes 
encrypting and decrypting files as easy as clicking on the file name. If 
you 're. . . 
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. . . before you can even run the program) . 

Another level of encryption is a designated area on the hard disk, in 
which all stored files are automatically encrypted . This is possible 
with programs like Utimaco ! s Safe Guard Easy products that perform 
on-the-fly encryption. In other words, encryption and decryption are part 
of the normal file save and open process. This can be more convenient 
because constant entering of passwords isn't required. Then again, if the 
master password is compromised, the attacker may... 
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...ABSTRACT: activated. Folders selected in the Windows 95 Explorer can be 
designated as SmartLock folders to ensure that files copied or moved to the 
folders are encrypted automatically . SmartLocked files are opened 
by authorized users the same as any other files, and decryption is 
transparent. The combination of locking and encryption raises the level of 
security available... 

designated as a SmartLock folder by selecting the Enable SmartLock 
Folder option. This ensures that all files copied or moved to such a folder 
will automatically be encrypted , and all files copied or moved out of 
the folder will be decrypted. A user with file access can open 
SmartLocked files just like any other file; the decryption will be 
completely transparent. Auto -encryption and decryption can be 
disabled for particular files within a Smartlock folder, allowing for more 
complex groupings of files. 

Encryption Control 

Your Eyes Only also allows for... 
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... inactive for a setamount of time. You can also encrypt or decrypt 

files using RSA encryption and share them with designated users. The 
SmartLock folder automatically decrypts and encrypts files each 
time they are opened and closed, respectively, though it won't work on 
shared drives. 

Everything on Your Eyes Only is customizable. And if you happen to 
forget your. . . 
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Nine no-cost steps to a secure LAN. (suggestions for improving network 

security) (includes related article on products for increased network 

security) 

Gilliland, Steve 

Computer Shopper, vl5, nil, p635(3) 
Nov, 1995 

ISSN: 0886-0556 LANGUAGE: English RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 2566 LINE COUNT: 00203 



RSA Data Securit^p RSA Secure for Windows 1.0 (8^0782-5453, $129 
list for single user) uses the industry-standard, 80-bit RC4 encryption 
algorithm, which automatically encrypts files when Windows closes 
and deciphers them when Windows reopens. The program features safeguards 
for open files in the event of sudden power loss, as well as automatic 
backup and emergency file -access procedures. 
Auditing 

Accessible from any workstation, AuditTrack for Windows 2.0 from On 
Technology Corp. (800-767-6683, prices start at $495 list for 50 users), is 
an. . . 



12/3, K/82 (Item 11 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2000 The Gale Group. All rts. reserv. 
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In LAN, security paranoia pays off. (computer security issues) (one of five 
articles in "Your Best Defense System") 

Garfinkel, Simson 

Windows Sources, v3, n9, p82(3) 

Sep, 1995 

ISSN: 1065-9641 LANGUAGE: English RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 2224 LINE COUNT: 00178 

...ABSTRACT: the government-sanctioned Kerberos and store a copy of every 
key on a central server; all keys must be changed if the server is 
compromised. Automatic encryption software encrypts files at write 

time and decrypts them as they are read; it is the only way to be certain 
of eliminating network eavesdropping. 

... public keys, not secret keys. You can publish the public keys--the 

secret keys will still be secure. 

The best encryption solution is software that automatically 
encrypts files at write time and decrypts them when you read them back 
from the hard disk. (Some backup programs let you encrypt files during 
writes to tape . ) 

Encryption is the only way to eliminate network eavesdropping. Any 
computer can intercept and read every packet of information transmitted 
over the LAN. . . 
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01804866 SUPPLIER NUMBER: 17159740 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Version control directory, (contains company names and brief version 
control product descriptions) 

Data Based Advisor, vl3, n5, p54(4) 
June, 1995 

ISSN: 0740-5200 LANGUAGE: English' RECORD TYPE: Fulltext 

WORD COUNT: 2340 LINE COUNT: 00216 

19040 

{215)443-9705, fax {215)4 43-9753 
Updatelt!, US$125 

Compares old and new versions, extracts changes from new version and 
loads them into change file . Provides automatic change file 
encryption , binary file difference utility, and file compression 
utility. OS/2. 

Intersolv, Inc. 

3200 Tower Oaks Blvd. 

Rockville, MD 20852 

{301)230-3200, fax {301)231-7813 

PVCS . . . 
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01766160 SUPPLIER NUMBER: 16715800 {USE FORMAT 7 OR 9 FOR FULL TEXT) 

Unresolved security issues blunt distributed hoopla, (comprehensive 

security needed for multiplatf orm, distributed networks) (includes 

related article on LAN security problems) (Buyers Guide) 

Adhikari, Richard 

Software Magazine, vl5, n2, p44(7) 
Feb, 1995 

DOCUMENT TYPE: Buyers Guide ISSN : 0897-8085 LANGUAGE: ENGLISH 

RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 4209 LINE COUNT: 00336 

... a user has clearance to open a particular application. 

EDM is described as an object-oriented distributed systems management 
package with security features such as automatic policy-based management; 

encryption of objects, files and passwords transported over open 
networks; desktop access with user-authentication features and a time 
expiry facility that lets managers control how long a password is valid. 
And, most important. . . 
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Power made easy: mainstream Windows databases, (evaluation of Ace 
Software's AceFile 2.0, Approach Software ! s Approach 2.0 for Windows, 
DataEase International's DataEase Express for Windows 1.1, Timeworks * 
Data Manager for Windows and Claris 1 FileMaker Pro 2.0 for Windows 
databases) (includes related articles on development tools and business 
databases) (Software Review) (Evaluation) 
Rose, Philip F.H. 

Computer Shopper, vl3, n9, p488(8) 
Sept, 1993 

DOCUMENT TYPE: Evaluation ISSN : 0886-0556 LANGUAGE: ENGLISH 

RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 4 690 LINE COUNT: 00370 

... file formats. In fact, Approach lacks a native file format, relying 

primarily on dBASE and Paradox formats. 

Besides handling sophisticated support issues such as Paradox 
encryption and automatic index updating in dBASE, FoxPro, and Paradox, 
Approach 2.0 adds the ability to create SQL.QRY files to automate the 
downloading of data from. . . 

...and 1-2-3 files, and supports LAN Manager, LANtastic, NetWare, and VINES 
networks out of the box, offering automatic record locking, password 
protection, and read -only files . 

Of the programs evaluated here, Approach has the highest level of 
Windows sophistication. It supports drag-and-drop, both to launch the 
program and to. . . 
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AlertView 2.1 is the network manager's busy little helper. (Shany Inc ' s 
network management software) (includes related article) (Software Review) 
(New ! ) (Evaluation) 

Pompili, Tony 

PC-Computing, v6, nil, pl32(l) 
Nov, 1993 

DOCUMENT TYPE: Evaluation ISSN: 0899-1847 LANGUAGE: ENGLISH 

RECORD TYPE: FULLTEXT; ABSTRACT 



WORD COUNT: 641 LIl^KOUNT: 0004 9 



... of Windows memory, " via TSRs that reside on individual 

workstations. The client portion of the program reports back to a central 
AlertView Manager PC, which automatically deciphers the problem and 
sends the fix back to the user's PC. If you get a "Too many files " error, 
AlertView can modify the PC's CONFIG.SYS file, inform the user of the 
change, and even reboot the workstation. 

We found AlertView 2.1 painless to install... 
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SecretDisk II and SecretDisk II Administrator, (data security software from 

Lattice Inc.) (brief article) (New Products: Microcomputers) (Product 

Announcement) 

Software Magazine, vll, nl5, pl07(l) 
Dec, 1991 

DOCUMENT TYPE: Product Announcement ISSN: 0897-8085 LANGUAGE: 

ENGLISH RECORD TYPE: FULLTEXT 

WORD COUNT: 137 LINE COUNT: 00011 

SecretDisk II Version 1.05 offers users the ability to load SecretDisk 
device drivers into high memory; and automatically encrypts programs 
and files as they are written to a secret disk, and unencrypts them as 
they are read from the disk. Access is controlled through user-defined 
passwords . 

SecretDisk II Administrator, a... 
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01452340 SUPPLIER NUMBER: 11378157 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

DeltaFile automates updates. (New Products: Industry-Related News & 
Announcements) (brief article) (product announcement) 

TECH Specialist, v2, n9, p73(l) 
Sept, 1991 

DOCUMENT TYPE: product announcement ISSN: 104 9-913X LANGUAGE: 

ENGLISH RECORD TYPE: FULLTEXT 

WORD COUNT: 174 LINE COUNT: 00013 

The 'change file 1 is constructed so that it can be safely 
distributed via public BBS at no cost or risk to the developer. The change 

file only has value when run against an old version of the files, it is 
automatically data encrypted , can be further secured with a password, 
and can be compressed during creation for even more disk savings. 
DeltaFile costs $249.95. A demonstration version... 
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Fighting network infection, (protecting local-area networks against 

computer viruses) (includes related articles on using existing network 

security systems and on virus insurance) 

Powell, Dave 

Networking Management, v7, n9, p38(8) 
Sept, 1989 

ISSN: 1052-04 9X LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 3851 LINE COUNT: 00305 



1 



...ABSTRACT: Newspaper ^^lishers ' Association computer ^Pilities . 
Viruses come from several sources, including: disgruntled employees, new 
employees with outside software, employees who do work at home and files 
downloaded from networks. The openness of many wide-area networks in the 
US increases the likelihood of infection. A viable security plan should 
address: access controls, passwords, automatic network encryption , 
message authentication, software 'signature' verification and anti-viral 
products . 
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Upgrade has password control, data encryption. (Watchdog 5.0, data security 
software from Fischer International Systems Corp.) (product announcement) 

Computers in Banking, v5, n8, p64(l) 
Aug, 1988 

DOCUMENT TYPE: product announcement ISSN: 0742-6496 LANGUAGE: 

ENGLISH RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 692 LINE COUNT: 00055 

... of the micro products division at Fischer, has been "improved in 

various and sundry ways," including such security features as ID and 
password access control, automatic data encryption that is transparent 
to users, multiple file access levels, multiple user permission levels, 
and audit trails for logging all system and user activity. 
One of the changes that users asked for is an. . . 
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Enigma to update PC-Safe features. (Enigma Logic Inc. ' s security software) 
(product announcement) 

PC Week, v5, n35, p31 (1) 
Aug 29, 1988 

DOCUMENT TYPE: product announcement ISSN: 0740-1604 LANGUAGE: 

ENGLISH RECORD TYPE: FULLTEXT 

WORD COUNT: 4 00 LINE COUNT: 00030 

try to boot the system from a floppy-disk drive, company officials 

said. 

The forthcoming release of PC-Safe II also includes enhanced 
identification verification, automatic encryption of data and file 
-by-file access control, said John Muir, president of the 6-year-old 
Concord, Calif., company. 

Enigma's line of SafeWord security products are based on the concept 
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The micro community matures, (security issues) 

Infosystems, v35, n2, p34(l) 
Feb, 1988 

ISSN: 0364-5533 LANGUAGE: ENGLISH, RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 653 LINE COUNT: 00052 

... forgets passwords. Considering the flexibility and depth of the 

product, administration is not nearly as complex as might be expected. 
Menus are clear with help readily available. 



For additional pro^^tion, files can be encrypted ^Automatically 

. Also included is a logging service with associated reports. Documentation 
for PC/DACS is thorough and easy to follow. 

For more information on specific micro. . . 
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Watchdog upgrade prevents users from copying or erasing programs, (product 
announcement ) 

Jones, Robert Snowdon 
InfoWorld, vlO, n25, pl8(l) 
June 20, 1988 

DOCUMENT TYPE: product announcement ISSN: 0199-6649 LANGUAGE: 

ENGLISH RECORD TYPE: ABSTRACT 

...ABSTRACT: of its Watchdog data security program allows users to execute 
programs, but not to copy or erase them. It provides ID and password access 
control, automatic data encryption , multiple file access levels, 
user permission levels, and audit trails, and runs on PS-2s and PC 
compatibles. It sells for $295, with upgrades available for $50. A... 
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Security strategies: hardware protection for PCs. (Hardware Review) 

Aarons, Richard; Raskin, Robin 
PC Magazine, v6, n8, pl04{12) 
April 28, 1987 

DOCUMENT TYPE: evaluation ISSN: 0888-8507 LANGUAGE: ENGLISH 

RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 4 917 LINE COUNT: 00394 

... another. That way the thief or tamperer won't be able to sneak a 

board off the premises for decoding. 

Most software programs encrypt your file after you've written it. 
Some hardware also encrypts on a file level, but because encryption on 
chips take so little time, they can encrypt and decrypt "on the fly." With 
this system, every time your program writes to disk, the data is 
automatically encrypted , an every time it reads from disk, the data is 
decrypted. This method is obviously more secure than writing a normal 
file out to disk, encrypting it, and then decrypting the whole thing when 
you want to work on it. With integral encryption, the only time the... 
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Keeping the LAN manager honest: security concerns, (connectivity section) 

Bonner, Paul 

PC Week, v4 , n9, pCl (3) 

March 3, 1987 

ISSN: 0740-1604 LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 2100 LINE COUNT: 00162 

... Inc., of Richardson, Texas. Micronyx manufacturers a product for 

NetWare-based networks called Triad Plus that provides a host of 
workstation security capabilities. These include automatic data 
encryption and the ability to provide a user or workstation with access 
to data on a file -by-file basis and to determine which system resources 



(floppy-drives, hard-di^^lrives , printers, modems) a us^^ay access . 
Access privileges to a rile are set by the user, not the system 
administrator, under the Triad system. 

In addition, Triad Plus creates an audit trail of all user activity 
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Microsoft introduces fast spreadsheet for LANs . (product announcement) 

Kanzler, Stephen 

PC Week, v4 , n2, pi (2) 

Jan 13, 1987 

DOCUMENT TYPE: product announcement ISSN: 0740-1604 LANGUAGE: 

ENGLISH RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 617 LINE COUNT: 00050 



environment include password protection, data encryption and 
implicit file locking. 

Spreadsheets can be optionally password-protected when created, and 
data in password-protected spreadsheets is automatically encrypted . 
Encryption scrambles the contents of a spreadsheet to prevent it from 
being read using software-debugging tools or utility programs, such as the 
Norton Utilities, which can read raw data files directly. 

Implicit file locking prevents spreadsheet data from being corrupted 
by restricting write permission on an open spreadsheet to the user who 
opened the file. . . 
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SecretDisk a Lock- In Winner in Encryption. 

Bonner, Paul 

PC Week, v3, n7, p89 

Feb. 18, 1986 

DOCUMENT TYPE: evaluaton ISSN: 0740-1604 LANGUAGE: ENGLISH 

RECORD TYPE: FULLTEXT; ABSTRACT 

WORD COUNT: 1112 LINE COUNT: 00084 

...ABSTRACT: encryption process of creating, manipulating and using 
encrypted files until it is a function that is identical to normal DOS 
operations. The $59.95 package automatically encrypts and 
password-protects all data or programs, allows authorized users access to 
encrypted files as easily as to other files, provides copying, back-up, 
restoration and manipulation of protected data at any time, and allows 
parts of hard disks. . . 

. . . where the processes of creating, manipulating and using encrypted, 

protected files are indistinguisable from those associated with normal DOS 
use . 

Imagine a security system that automatically encrypts and 
password-protects any data or program, and that also allows authorized 
users to access encrypted files as easily and as quickly as any other 
disk file. Imagine such a system that allows thes users to copy, back up, 
restore and otherwise... 
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Watchdog PC data security. (Watchdog 4.1) (product announcement) 



Mini-Micro Software, vl]^Bi4, pl6(l) 
Wint, 1986 ^ 
DOCUMENT TYPE: product announcement 
ENGLISH RECORD TYPE: ABSTRACT 

...ABSTRACT: Innis Systems Corp announces release 4.1 of the Watchdog 
data-security program for PCs with hard disks. Watchdog incorporates ID and 
password access controls, automatic data encryption and decryption ; 
and read , write , and create-delete file permissions. The program 
provides protection for directories, requiring only that the directories be 
selected at installation time. Release 4.1 includes a simplified method of 



ISSN: 0265-6760 LANGUAGE: 
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Module Controls Access to Micros . 

Computers in Banking, v2, n6, p71 
Sept., 1985 

DOCUMENT TYPE: evaluaton ISSN: 0742-64 96 LANGUAGE: ENGLISH 

RECORD TYPE: ABSTRACT 

...ABSTRACT: designed the Access Control Module (ACM) to limit access to 
the IBM PC, PC-XT, PC-AT and compatibles without requiring user 
interaction. The ACM automatically encrypts all entered data and 
decrypts it to read. Once encrypted, data can only be read through an 
identically configured ACM. The ACM has a multilevel file access 
structure that determines disk file ownership and processes the American 
National Standards Institute's (ANSI) X9.9 (1985) Financial Institution 
Message Authentication Standard for wholesale banking applications. The ACM 
can . . . 
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Set Items Description 

51 117893 (OPEN? OR CHANG? OR EDIT? OR MODIF? OR ACCESS? OR READ? OR 

WRIT? OR CLOSE? ? OR CLOSING) (3N) (DOCUMENT? OR FILE OR FILES) 

52 796906 AUTOMATIC? OR AUTO OR (WITHOUT OR NO OR "NOT" OR NON) (3N) {- 

HUMAN OR USER? ? OR OPERATOR?) (3N) ( INTERVEN? OR INPUT? OR ACT- 
ION? OR ACTIVIT? OR INITIAT? OR REQUEST? OR COMMAND? OR INSTR- 
UCTION?) OR SUBROUTINE? OR SUB () ROUTINE? 

53 114115 ENCRYPT? OR DECRYPT? OR ENCIPHER? OR DECIPHER? OR ENCYPHER? 

OR DECYPHER? OR CYPHER? OR CIPHER? OR CRYPT? OR SECRET {) KEY? ? 
OR KEY () VALUE? ? OR RECRYPT? OR RECIPHER? OR RECYPHER? 

54 69 S1(S)S2(3N)S3 
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01245329 98-94724 
Symantec tightens secur i ty 

Taft, Darryl K 
Computer Reseller News n688 PP: 86 Jun 17, 1996 
ISSN: 0893-8377 JRNL CODE: CRN 
WORD COUNT: 151 

...ABSTRACT: security product that features encryption technology to lock 
data on notebook computers so only the owner can view it. The product 
features "on-the-f ly" encryption technology that automatically 

decrypts files when the authorized user opens them, then reencrypts the 

files when saved or closed . 

...TEXT: a security product that features encryption technology to lock 
data on notebook computers so only the owner can view it. 

The product features "on-thefly" encryption technology that 

automatically decrypts files when the authorized user opens them, then 
re-encrypts the files when saved or closed , company officials said. A 
SmartLock feature provides automatic encryption . Thus, users do not 

have to remember commands . 
Norton Your Eyes Only uses RSA Data Security's public key/private key 
encryption technology. The product also provides an optional bootup access 
control feature... 
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Making the right connections 

Koll, Thomas 

Security Management v39nll PP: 55-59 Nov 1995 
ISSN: 0145-9406 JRNL CODE: SEM 
WORD COUNT: 2537 

...TEXT: software packages, such as DiaLOCK Boot, offer only one. DiaLOCK 
Boot offers a low-to-mid-level encryption option, roughly equivalent to 
Folderbolt f s Quick Crypt . 

Data scrubbing. Automatic data scrubbing is another useful feature to 
look for in LAN security software. Data scrubbing is the process of 
automatically encrypting a file before deleting it. While data 

scrubbing does not prevent a file from being restored by "undelete" 
utilities, the reconstructed file can only be read by someone who holds 
the encryption key. The alternative is for each user to encrypt all files 
before deleting them. 

Virus checking. Viruses can get... 
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Safety Suite offers package of protection for Mac users 

Knibbe, Willem 

InfoWorld v!6nl2 PP: 29 Mar 21, 1994 
ISSN: 0199-6649 JRNL CODE: IFW 
WORD COUNT: 324 

...TEXT: It works seamlessly so that when a user double-clicks on an 
encrypted file, it prompts for the password, then unencrypts the document. 



When the document is^Blosed , it is re-encrypted ^Somatically . 

Shredder offers one-, two-, or three-pass byte-by-byte dai^t wipeouts. 

Disk Locker password-protects the entire hard disk or even external drives, 
and. . . 
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Data guardians 

Schneier, Bruce 

Macworld vl0n2 PP: 144-151 Feb 1993 
ISSN: 0741-8647 JRNL CODE: MAW 
WORD COUNT: 37 01 

...TEXT: Shredder take top honors. ultraSecure does almost everything I can 
think of, offers an easy-to-use interface, never crashed on me, was the 
only automatic -encryption program I couldn't break--and it was also the 
fastest DES product. At a reasonable $149.95, Citadel with Shredder is also 
a standout program, but for different reasons. It does not have file - 

access controls, but does have easy-to-use manual-key encryption--the 
most secure option available — and the best file-erasure features on the 
market. DiskLock. . . 
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Self-Escrow Desktop Encryption 

(Security Dynamics will begin shipping its RSA SecurPC 2.0 desktop 
encryption software, which lets US businesses keep their private keys 
within an organization) 

InternetWeek, p 14 
September 22, 1997 

DOCUMENT TYPE: Journal ISSN: 0746-8121 (United States) 
LANGUAGE: English RECORD TYPE: Fulltext 
WORD COUNT: 160 
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TEXT: 

...data are held by corporate officers who can make them available to law 
enforcement agencies with court orders, Sizer said. With RSA SecurPC 2.0, 
files remain encrypted until opened through an application on the 
network. They are automatically re-encrypted when closed. Available now 
on Windows 95, RSA SecurPC 2.0 costs $59. 
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Symantec Tightens Security 

(Symantec will introduce Your Eyes Only for Windows 95, security software 
with encryption technology to lock data on notebooks) 

Computer Reseller News, n 688, p 86 
June 17, 1996 

DOCUMENT TYPE: Journal; News Brief ISSN: 0893-8377 (United States) 
LANGUAGE: English RECORD TYPE: Fulltext 
WORD COUNT: 157 



{ USE FORMAT 7 OR 9 FOR ^^I/TEXT) ^ 

TEXT: 

...security product that features encryption technology to lock data on 
notebook computers so only the owner can view it. 

The product features "on-the-f ly" encryption technology that 
automatically decrypts files when the authorized user opens them, then 
re-encrypts the files when saved or closed , company officials said. A 
SmartLock feature provides automatic encryption . Thus, users do not 

have to remember commands . 
Norton Your Eyes Only uses RSA Data Security's public key/private key 
encryption technology. The product also provides an optional bootup access 
control feature... 
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Symantec has solution to computer data theft 

(Symantec's Norton Your Eyes Only for Windows 95 software protects computer 
data; one of every 14 notebooks sold in US in 1995 was reported stolen) 

Journal of Commerce, v 408, n 28,738, p 10A 
June 05, 1996 

DOCUMENT TYPE: Journal; News Brief ISSN: 0361-5561 (United States) 
LANGUAGE: English RECORD TYPE: Fulltext 
WORD COUNT: 127 
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TEXT: 

...Symantec Corp. Monday announced Norton Your Eyes Only for Windows 95. 
Norton Your Eyes Only provides data protection through features such as 
"on-the-fly" encryption technology, which automatically allows 
decryption files when authorized users open them, and re-encrypts them 
when saved or closed. 

With the Internet used increasingly for sending confidential information, 
this feature is necessary to prevent unauthorized. . . 
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Intrasect Technologies Announces docSpace (TM) Direct; Corporations Send 
Files Over the Web with docSpace Direct 

DATE: February 25, 1998 09:45 EST WORD COUNT: 403 

... docSpace Direct "Hot" button. This hyperlinks to the docSpace engine. 
Users then browse their hard drive, select the file, and click "Send. " The 
file is automatically encrypted and uploaded into the docSpace server . 
Recipients access the stored file and transaction reports by securely 
logging into docSpace. There is no system administration required and all 
the users need is a simple Web browser with. . . 
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1209761 LAM046 

Symantec ' s Norton Your Eyes Only Receives ICSA Product Certification for 
Cryptography 



DATE: January 12, 1998 ^ 11:01 EST WORD COUNT: ^8 6 



... of getting the most secure products available. One of the first ICSA 
certified cryptography products, Norton Your Eyes Only offers SmartLock, 
transparent "on-the-f ly" encryption technology which automatically 

decrypts files when authorized users open them and re-encrypts them 

when saved or closed. Since this functionality is automatic, users do not 
have to remember to do these tasks and. . . 
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Symantec Announces Norton Your Eyes Only Version 4 . 1 for Windows 95 NT 

DATE: January 12, 1998 11:00 EST WORD COUNT: 877 

... Your Eyes Only version 4.1 which now supports Windows NT. Norton Your 
Eyes Only provides data protection through features such as "on-the-f ly" 

encryption technology, that automatically decrypts files when 

authorized users open them and re-encrypts them when saved or closed. 
With theft on the rise and the Internet used increasingly for sending 
confidential information, this feature... 

...and in general over the Internet becomes of utmost importance." 
About Your Eyes Only 

Norton Your Eyes Only offers SmartLock, transparent patented 
"on-the-fly" encryption technology which automatically decrypts 

files when authorized users open them and re-encrypts them when saved 
or closed. Since this functionality is automatic, users do not have to 
remember to do these tasks and. . . 



6/3,K/ll (Item 4 from file: 813) 

DIALOG (R) File 813: PR Newswire 

(c) 1999 PR Newswire Association Inc. All rts. reserv. 
1168293 NEW036 

Security Dynamics 1 RSA SecurPC Wins Network Computings Editor's Choice 
Award for Best Stored File Encryption Product 

DATE: October 15, 1997 13:27 EDT WORD COUNT: 699 

...fulfilling elaborate reporting requirements, or spending additional time 
and resources seeking additional U.S. government approvals. For users, RSA 
SecurPC 2.0 provides fast, transparent, automatic encryption full-time 
and offers users an intuitive way to protect sensitive data through 
integration with the operating system. Files encrypted with RSA SecurPC 2.0 
remain encrypted until opened through an application on the network and are 

automatically re- encrypted when the file is closed . New boot lock 
and screen * lock features, initiated once, provide users with easy, 
additional security for their portable computers. 

"RSA SecurPC 2.0 offers new... 
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Security Dynamics 1 RSA SecurPC 2 . 0 Receives Approval for International 
Export 



DATE: September 17, 1997 08:02 EDT WORD COUNT: 926 



... SecurPC 2.0 will enable secure communication with companies based 
outside the U.S. and Canada. 

For users, RSA SecurPC 2.0 provides fast, transparent, automatic 
encryption full-time and offers users an intuitive way to protect 
sensitive data through integration with the operating system. Files 
encrypted with RSA SecurPC 2.0 remain encrypted until opened through an 
application on the network and are automatically re-encrypted when the 
file is closed . New boot lock and screen lock features, initiated once, 
provide users with easy, additional security for their portable computers. 

Likewise, RSA SecurPC 2.0 enables... 
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DATE: July 25, 1996 17:16 EDT WORD COUNT: 1,721 

...contact management. 

Symantec announced Norton Your Eyes Only for Windows 95. Norton 
Your Eyes Only provides data protection through features such as 
"on-the-fly" encryption technology, that automatically decrypts 
files 

when authorized users open them and re-encrypts them when saved or 
closed. With the Internet used increasingly for sending confidential 
information, this feature is necessary to prevent unauthorized. . . 



6/3,K/14 (Item 7 from file: 813) 

DIALOG (R) File 813: PR Newswire 

(c) 1999 PR Newswire Association Inc. All rts. reserv. 
0956653 SJM007 

SYMANTEC ANNOUNCES NORTON YOUR EYES ONLY FOR WINDOWS 95 

DATE: June 3, 1996 07:55 EDT WORD COUNT: 867 

...Nasdaq: SYMC) today announced Norton 

Your Eyes Only for Windows 95. Norton Your Eyes Only provides data 
protection through features such as "on-the-fly" encryption technology, 
that automatically decrypts files when authorized users open them 
and re- 
encrypts them when saved or closed. With the Internet used increasingly 
for sending confidential information, this feature is necessary to 
prevent unauthorized. . . 

. . . information intended for "your eyes 
only." 

KEY FEATURES OVERVIEW 

Comprehensive 32-bit security designed specifically for Windows 
95 operating system 

Patent-pending "on-the-fly" automatic encryption using RSA's 
public key encryption technology 

Provides optional access control during bootup to prevent 
unauthorized access to data on the hard disk 

Configurable automatic... 



...protect information o^phe computer 

or over the Internet becomes of utmost importance." 



Foolproof Protection 

Norton Your Eyes Only offers SmartLock, transparent "on-the-fly" 
encryption technology which automatically decrypts files whe 

authorized 

users open them and re-encrypts them when saved or closed. Since this 
functionality is automatic, users do not have to remember to do these 
tasks and. . . 
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AT&T AND IRE LINK SECURE REMOTE ACCESS PRODUCTS 

DATE: February 4, 1995 10:30 EST WORD COUNT: 622 

...user action, dsaSign and the AX400 create a random one-time 
password which is signed using DSS, guaranteeing that only the 
authorized user can gain access to the system. Files from users can 
also be digitally signed to provide undeniable proof of the identity of 
the message sender and to prevent modification of the data. In 
addition, the AX4 00 automatically encrypts the user's data using the 
Data Encryption Standard (DES) which prevents unauthorized parties from 
stealing sensitive information. 

"The AT&T-IRE product combination is... 
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NOVELL AND MICRONYX ANNOUNCE AGREEMENT 

DATE: November 4, 1987 14:39 E.T. WORD COUNT: 513 

...NetWare's operating environment. Immediate customer benefits 
include: a common login for the PC and the local area network; a 
common, secure method of controlling file access based around 
Micronyx 1 encryption technology; automatic encryption of all data 
transferred between the PC and file server; and the ability to 
centrally administer security devices attached to the network's 
file server . . . 
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New secure E-Mail for Microsoft Mail users 

Christensen, Dave 

Business Wire (San Francisco, CA, US) si pi 
PUBL DATE: 950719 
WORD COUNT: 393 
DATELINE: Denver, CO, US 

TEXT: 



...networks. Its modular design means that it works across operating 
system platforms and interfaces to third party security products. 



Stoplock V features include: — System, device, file , application 
and directory access control — Drive A: boot protection -- SoftHold 
(screen blanking) — System and User Auditing — Enhanced Device 
Protection -- inhibits the use of low level utilities — Data encryption 
and key management Automatic file encryption through the 

AutoEncrypt feature — Unlimited number of users 

Other features include secure data transfer, and a Secure Client 
Interface (SCI) facility, as well as a... 
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Logical Devices Introduces New Semiconductor Device Programmer 

Goldfarb, Ira; Hackmeister, Dick 

Business Wire (San Francisco, CA, US ) si pi 

PUBL DATE: 900820 

WORD COUNT: 14 6 
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TEXT: 

...current and voltage slew rates, clock rates and timing 
relationships. 

Data patterns to be programmed are conveniently downloaded from any 
logic compiler with a JEDEC file output. Full editing capabilities are 
available on any device file, including data encryption keys and auto 
-incrementing device serial numbers. 

ALLPRO-88's standard test head handles DIP parts, leadless chip 
carriers, leadless plastic chip carriers, surface mount devices and small 
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01142190 CMP ACCESSION NUMBER: NWC19971015S0028 
Stored File Encryption: Boiled Eggs And Scrambled Data 

Philip Carden 

NETWORK COMPUTING, 1997, n 819, PG122 
PUBLICATION DATE: 971015 

JOURNAL CODE: NWC LANGUAGE: English 

RECORD TYPE: Fulltext 
SECTION HEADING: Reviews 
WORD COUNT: 3125 

from disk, as BestCrypt NP and Armor 97 do. It instead encrypts 
and decrypts whole files on disk automatically when a valid user attempts 
to open the file . Users are authenticated at logon time, and the 
authentication lasts until the user logs of f -tamper-proof ing is provided 
by means of screen-locking. Unfortunately, that means opening and 
closing large files is slow going when compared with BestCrypt NP and 
Armor 97, and the system is arguably less secure for short periods. The 
product also supports only smart folders, which are automatic 
encryption and decryption solutions, on local drives. If you want to 
encrypt files on a server, you must do it manually by selecting one or 
more files and . . . 
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Self-Escrow Desktop Encryption (Security Monitor) 
Rutrell Yasin 
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SECTION HEADING: News & Analysis 

WORD COUNT: 167 



TEXT: 

data are held by corporate officers who can make them available 
to law enforcement agencies with court orders, Sizer said. With RSA 
SecurPC 2.0, files remain encrypted until opened through an 
application on the network. They are automatically re-encrypted when 
closed. Available now on Windows 95, RSA SecurPC 2.0 costs $59. 
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Psstt! Security Designed For Your Eyes Only (Security) 
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RECORD TYPE: Fulltext 

SECTION HEADING: Sneak Previews 
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... your hard drive (new or current) as a SmartLock folder. Files 

already existing in this folder, and any new files added to this 
directory are automatically encrypted . I f you try to access one of 
these files , it is automatically decrypted and presented to you. If 
another user tries to access this file and has not logged into Your 
Eyes Only at boot-up time, then the file appears as garbage data and the 
application trying to access the file will report an error. 

When you encrypt any file or folder, you can select which user's 
public keys will be on the recipients list... 
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LOCK ON DATA: Your Eyes Only for Win 95 to ship - Symantec Tightens 
Security 

Darryl K. Taft 
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The product features "on-the-fly" encryption technology that 
automatically decrypts files when the authorized user opens them, then 
re-encrypts the files when saved or closed , company officials said. A 
SmartLock feature provides automatic encryption . Thus, users do not 
have to remember commands . 

Norton Your Eyes Only uses RSA Data Security's public key/private 
key encryption technology. The product also provides an optional bootup 
access control feature. . . 
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TEXT: 

If you're a LAN administrator or power user, Norton Your Eyes Only 
provides on-the-fly encryption to protect your data. The program 
automatically decrypts files when opened and encrypts them when 
saved or closed. You can also manually encrypt and decrypt. 
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. . . Remote Authentication Dial-in User Service (RADIUS) server 

functionality also lets administrators leverage Security Briefcase as the 
single Secure remote access server solution and remote access management 

File Encryption: Security Briefcase protects data from 
unauthorised access and thieves by automatically encrypting and 

decrypting sensitive files, enabling busy end users to effortlessly 
protect data stored on laptops. Centralised administration and automated 
updating of the user's security policy ensures... 
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(USE FORMAT 7 OR 9 FOR FULLTEXT) 

Remote Authentication Dial-In User Service (RADIUS) server 
functionality also lets administrators leverage Security Briefcase as the 
single secure remote access server solution and remote access management 
platform. 

File Encryption: Security Briefcase protects data from 
unauthorized access and thieves by automatically encrypting and 

decrypting sensitive files, enabling busy end users to effortlessly 
protect data stored on laptops. Centralized administration and automated 
updating of the user's security policy ensures... 
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offers the easiest and most seamless PC protection available for 
organisations with hundreds of Windows NT systems. 

PCShield uses AXENT 's proven IntelliCrypt technology to automatically 
encrypt and decrypt information for end users running Windows 95 or 
NT. According to installation-specific rules, the IntelliCrypt system 
automatically protects newly created files from unauthorised access 
anywhere they are created or saved. This non-invasive protection remains 
with the file wherever it goes, anywhere on the network. The end user need 
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00119256 DOCUMENT TYPE: Review 

PRODUCT NAMES: iSend (772895); e-Parcel (772909) 

TITLE: Registered E-Mail Adds New Dimension To Electronic Messaging 

AUTHOR: Marks, Susan J 

SOURCE: MicroTimes, vl96 p67(4) Aug 11, 1999 
HOMEPAGE : ht tp : / /www . microt imes . com 

RECORD TYPE: Review 

REVIEW TYPE: Product Comparison 

GRADE: Product Comparison, No Rating 

United Parcel Service's Document Exchange, Pitney Bowes* iSend, Compaq 
Computer's and e-Parcel LLC's jointly marketed online . delivery/e-Parcel , 
and receiptmail.com represent a growing trend in supplanting traditional 
registered document handling services. These services all offer varying 
degrees of tracking, delivery confirmation, and security for the online 
delivery of a variety of documents, from sensitive legal materials to 
complex graphic images. Receiptmail.com and iSend are both browser-based, 
requiring no additional software. After entering the site, users can send 
mail and attachments that are later encrypted (either automatically or 
optionally) . The receiver then gets an e-mail notification of delivery, 
along with the document number and a URL, in order to retrieve the 
document. The sender receives a tracking report, as well as information on 
when the file is opened and read . Compaq's online . delivery, e-Parcel, 
and a client version of iSend work similarly, but require an Internet 
connection and special software for both senders and recipients, though 
this is often available as a free download. Developers of delivery systems 
using special software believe that this minimizes problems associated with 
different browsers and e-mail systems and also lessens difficulties in 
downloading large files. Most services charge per document and by size 
while one firm, receiptmail.com, charges a flat yearly fee for unlimited 
use . 

COMPANY NAME: Pitney Bowes Software Systems (414344); e-Parcel LLC 

(668877) 
SPECIAL FEATURE: Tables 

DESCRIPTORS: Freight Processing; E-Commerce; Mailing Lists; Document 

Management; Encryption; File Transfer; Public Networks 
REVISION DATE: 20000228 
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RECORD TYPE: Review 
REVIEW TYPE: Review 
GRADE: B 

CADLock 's CADLock SE 3.1 is an affordable and easy-to-use application that 
provides a secure data exchange infrastructure for architects needing to 



ensure the safety of sen^^ive renderings and data on a l^^l hard drive. A 
copyright notice can be attached to a file that cannot be altered except by 
password, then the entire file may be locked using a passkey. CADLock 
automatically and transparently encrypts file data when saving locked 
documents, and decryption requires either a password or public/private key 
pair in order to open a document . Who can open a CADLocked file , 
and what portions of the document they may have access to, is fully 
controllable by the owner, and any attempts to open files illegally 
will have all commands, menus, and API functions disabled. Unfortunately, 
if a passkey or password is lost, the drawing cannot be reconstructed from 
the secured file, therefore making it necessary and wise to back up copies 
of each file in unsecured AutoCAD DWG format. 

PRICE: $249 

COMPANY NAME: CADLock Inc (615153) 
SPECIAL FEATURE: Screen Layouts Charts 

DESCRIPTORS: Computer Security; CAD Utilities; Architects; Windows; IBM PC 

& Compatibles; Encryption; File Security; Password Protection; AutoCAD 
REVISION DATE: 20000228 
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RECORD TYPE: Review 
REVIEW TYPE: Review 
GRADE: A 

Symantec's Your Eyes Only 4.1 (YEO) offers an extra level of security for 
Windows 95 and Windows NT users. Its functionality will satisfy advanced 
users, and it is easy enough for beginners. YEO offers more than simple 
file encryption; it includes ScreenLock, BootLock, and SmartLock. 
ScreenLock is a password-protected screen saver. BootLock prohibits access 

to encrypted files at startup. With SmartLock, users can set folders to 
automatically encrypt files when users are not using them. It also 
includes emergency password and key recovery features. An Emergency UnLock 
disk and one-time password provisions are included for distributed 
installations. YEO f s encryption functions can be accessed by right clicking 
a file in Explorer. It offers five encryption options: DES, Triple-DES, 
RC4, RC5, and Blowfish algorithms. Reviewers found YEO easy-to-use; it runs 
from the system tray. 

PRICE: $90 

COMPANY NAME: Symantec Corp (386251) 
SPECIAL FEATURE: Screen Layouts 

DESCRIPTORS: Computer Security; Windows; IBM PC & Compatibles; Encryption; 

Windows NT/2000; File Security; System Utilities 
REVISION DATE: 20000830 
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PRODUCT NAMES: Entrust/ICE 1.0 (682047); Your Eyes Only 4.0 (631752); 
SecurPC 1.1 (546232); PCCrypto 1.0.1 (652652); SecureFile Release 
Candidate 1.0 (682055) 

TITLE : Encryption grows up 

AUTHOR: Cobb, Stephen 

SOURCE: Network World, vl4 n27 p53(3) Jul 7, 1997 
ISSN: 0887-7661 

HOMEPAGE: http: //www . nwf usion . com 

RECORD TYPE: Review 
REVIEW TYPE: Review 
GRADE: B 

Entrust Technologies 1 Entrust/ICE 1.0, Symantec's Your Eyes Only 4.0, RSA 
Data Security's (now Security Dynamics') SecurPC 1.1, McAfee Associates' 
(now Network Associates') PCCrypto 1.0.1, and Querisoft's SecurFile Release 
Candidate 1.0 are advanced encryption products compared. Entrust/ICE gets 
the highest marks overall, with good ratings for features, manageability, 
ease of use, performance, and encryption strength. Installation and 
documentation are rated above average. Entrust/ICE is a good choice for 
enterprise use because it links desktops and laptops to the higher level 
Entrust and Entrust/Lite public key infrastructures and uses advanced 
digital certificate technology developed by Northern Telecom, Entrust 1 s 
parent company . It automatically encrypts documents that have digital 
signatures, a unique numeric identifier that allows users to authenticate 
identities of participants in electronic transactions. Norton YEO is ideal 
for single users and smaller networks needing file protection and access 
control. It also provides a BootLock feature, which encrypts system data 
to protect against intruders who may try to gain access to a hard disk. 
SecurPC creates self -extracting encrypted files , emergency recovery, and 
good automated encryption, but its interface is plain and the price is 
somewhat high. PCCrypto has a powerful wipe file feature and algorithms, 
and SecureFile has many algorithms and an intuitive interface. 

COMPANY NAME: Entrust Technologies Ltd (630667); Symantec Corp (386251); 
Security Dynamics Inc (432351); McAfee.com (490113); Entevo Corp 
(647292) 

SPECIAL FEATURE: Tables Buyers Guides 

DESCRIPTORS: Encryption; File Security; Computer Security; Network 

Administration Tools; File Transfer; Network Software 
REVISION DATE: 20000823 
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00095973 DOCUMENT TYPE: Review 

PRODUCT NAMES: Your Eyes Only (631752) 

TITLE : Norton Encrypts Your Data 

AUTHOR: Johnson, M Harry 

SOURCE: LAN Times, vl3 n22 p66(2) Sep 30, 1996 
ISSN: 1040-5917 

HOMEPAGE: http: //www . lantimes . com 

RECORD TYPE: Review 
REVIEW TYPE: Review 
GRADE: A 

Symantec's Your Eyes Only, an access control application supporting 
information on laptops, desktops, and shared network volumes, unobtrusively 
allows users to securely share data on one system or over networks and the 
Internet. Users designate directories on their drives as SmartLock folders, 
and files stored in the directories are automatically encrypted when 



.saved and decrypted upoi^p^ening . EXE and DLL files ari^hly encrypted 
(manually), and only if the user so wishes. Symmetric-key and 
public/private-key encryption are supported to provide a good measure of 
both ease of use and security. A key is generated based on a user-selected 
password, and users choose the key's length; keys can run from 356 bits to 
2,048 bits, and the longer the key, the more secure the data. Your Eyes 
Only is rated excellent overall, especially for security and manageability; 
features, performance, installation, and ease of use are very good. 

PRICE: $90 

COMPANY NAME: Symantec Corp (38 6251) 
SPECIAL FEATURE : Screen Layouts Charts 

DESCRIPTORS: Computer Security; Laptop Software; Network Administration 

Tools; Encryption; Network Software; Internet Utilities; File Security; 
Public Networks; LANs; Internet Security 

REVISION DATE: 20000430 
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00082470 DOCUMENT TYPE: Review 

PRODUCT NAMES: Lotus Notes (550418); GroupWise (709255) 

TITLE: Security In Groupware Systems 

AUTHOR: Moskowitz, Robert 

SOURCE: MicroTimes, vll n9 pl74 (5) Aug 21, 1995 
HOMEPAGE : http: / /www . microtimes . com 

RECORD TYPE: Review 

REVIEW TYPE: Product Analysis 

GRADE: Product Analysis, No Rating 

Lotus Notes and Novell's GroupWise groupware environments are 
assesserivacy . 1 Privacy features are defined as security and authentication 
s. Security in Lotus Notes is based on selective access and data encrNotes 
also provides 'signature 1 authentication based on transparent fings along 
with ^secure* channel protection. GroupWise features both and private-key 
encryption systems plus file access restrictions. Gros praised for its 
automatic encryption mechanism which is completely ent to the user and 
which operates on locally-stored messages as wellsmitted data. 
COMPANY NAME: Lotus Development Corp (254975); Novell Inc (344893) 
SPECIAL FEATURE: Screen Layouts 

DESCRIPTORS: Notes/Domino; Network Software; Groupware; Encryption; 

Computer Security; Administration Tools 
REVISION DATE: 20000228 
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00076487 DOCUMENT TYPE: Review 

PRODUCT NAMES: SecurPC 1.0 (546232) 

TITLE: RSA Secure quickly protects data; supervisor retains access to 
files 

AUTHOR: Peschel, Joe 

SOURCE: InfoWorld, vl7 nl6 pl06(l) Apr 17, 1995 
ISSN: 0199-6649 

HOMEPAGE : http : / /www . inf oworld . com 



RECORD TYPE: Review 
REVIEW TYPE: Review 



GRADE : A 




RSA Secure 1.0, a Windows encryption package, encrypts multiple filesickly 
and provides password override keys that can be split among morne trustee. 
The product offers two programs, one for emergency access for user 
encryption; both link to File Manager. Installation is easye user should 
back up key and trustee disks. The user decides at inst if one password key 
should be able to override user passwords, or ifponsibility is split among 
several trustees. During testing, encryptiecryption performed as expected, 
and performance was above average. Tcan set a time in which a password 
stays in memory, so that it need nentered when multiple files in different 
directories are to be proces Auto -Crypt feature decrypts and encrypts 
on Windows launch and exit, nice feature. 

PRICE: $99 

COMPANY NAME: Security Dynamics Inc (432351) 
SPECIAL FEATURE: Charts 

DESCRIPTORS: Encryption; Windows; IBM PC & Compatibles; File Security; 

Computer Securi 
REVISION DATE: 20000228 
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0018995 

0018995XX STATUS: ACTIVE ENTRY 
TITLE: ARCServelT Enterprise Edition 

RELEASE DATE: 1998 

COMPATIBLE HARDWARE: IBM PC family and compatibles; Hewlitt-Packard 
micros; Unix & unix like environments 
MICROPROCESSOR TYPE: Available 

OPERATING SYSTEM (S) REQUIRED: Windows NT, Solaris, HP-UX, AIX, SCO Open 
Server, SCO Unix Ware 
PRICE INFORMATION: 

Diskette Contact publisher for price 

ANNOTATION: Provides centrally managed integrated storage management 
platform for heterogeneous enterprises. Delivers backup, restore, & 
disaster recovery. Includes end-to-end data compression, & encryption, 
automatic media management, built-in data migration & virus scanning, 
library support, RAID, image backup, open file backup, backup to 
mainframes, disaster recovery, application backup & client backup 

DESCRIPTORS: BUSINESS MANAGEMENT - MISCELLANEOUS 

DESCRIPTOR CODES: 10007155 

PUBLISHER: Computer Associates International, Incorporated; Comp Assocs 
NY (0-918317; 0-922091; 0-922344; 0-923108; 0-926530; 0-928104) 
ADDRESS: One Computer Associates Plaza (Headquarters) 

Islandia, NY 11788-7000 
TEL.: 407-661-6985 
SAN: 293-1133 

ADDRESS: 909 E . Las Colinas Blvd. 
Irving, TX 75039 
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0007255XX STATUS: ACTIVE ENTRY 
TITLE: SafeWord PC-Safe III 

RELEASE DATE: 06/1991 

COMPATIBLE HARDWARE: IBM PC family and compatibles 

MICROPROCESSOR TYPE: Manuals, telephone hot-line, BBS, on & off-site 
training 



OPERATING SYSTEM(S) I^HRED: PC-DOS or MS-DOS 3.0 or Wher 
PRICE INFORMATION: 
Other 275.00 
MANUAL AVAIL. 

ANNOTATION: Provides Automatic File-by-File Encryption & Access Control 
for IBM PCs & Compatibles. Access to the PC's Hard Disk & Encrypted 
Diskettes Is Protected by Any Combination of Memorized, Fixed Passwords, 
Single-Use Dynamic Passwords, Password Use Count, Access Limits, & Attack 
Detection & Prevention 

DESCRIPTORS: BUSINESS MANAGEMENT - PROTECTION AND SECURITY; PERSONAL 
COMPUTING - SECURITY 

DESCRIPTOR CODES: 10003733; 20001150 

PUBLISHER: Enigma Logic, Incorporated; Enigma Logic 

ADDRESS: 2151 Salvio St., Suite 301 
Concord, CA 94520 

TEL.: 510-827-5707 

SAN: 662-9741 
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WPI Acc No: 2000-550877/200051 

XRPX Acc No: N00-407553 
Computer-implemented method for accessing contents of encrypted data 
e.g. public key encrypted electronic document distributed across the 
internet 

Patent Assignee: CONTENT TECHNOLOGIES LTD (CONT-N) 
Inventor: HARRIS A S 

Number of Countries: 026 Number of Patents: 002 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

EP 1026854 A2 20000809 EP 99125246 A 19991217 200051 B 

JP 2000196590 A 20000714 JP 99365274 A 19991222 200051 

Priority Applications (No Type Date) : GB 9828341 A 19981222 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
EP 1026854 A2 E 27 H04L-012/22 

Designated States (Regional) : AL AT BE CH CY DE DK ES FI FR GB GR IE IT 

LI LT LU LV MC MK NL PT RO SE SI 
JP 2000196590 A 24 H04L-009/32 

Abstract (Basic) : EP 1026854 A2 

NOVELTY - The method involves establishing trustworthiness with a 
computer-implemented security provider which has access to the private 
cryptographic information. An indication of the encrypted data is 
received and the contents accessed without user input by 
notifying the security provider of the encrypted data. A decrypted 
copy of the encrypted data is received from the security provider based 
on the trustworthiness so that the contents are accessible, . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for a 
computer readable medium and computer system. 

USE - For data encrypted in a manner so that a private 
cryptographic information is needed to gain access to the contents. 

ADVANTAGE - Access to the contents of the data is gained without 
gaining access to the private cryptographic information. 

DESCRIPTION OF DRAWING (S) - The drawing shows an example of an 
electronic document being distributed using public key encryption. 

pp; 27 DwgNo 1/9 

Title Terms: COMPUTER; IMPLEMENT; METHOD; ACCESS; CONTENT; ENCRYPTION; DATA 

; PUBLIC; KEY; ENCRYPTION; ELECTRONIC; DOCUMENT; DISTRIBUTE 
Derwent Class: P85; W01 

International Patent Class (Main) : H04L-009/32; H04L-012/22 
International Patent Class (Additional): G06F-012/14; G09C-001/00; 

H04L-009/00; H04L-029/06 
File Segment: EPI; EngPI 
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012766203 **Image available** 
WPI Acc No: 1999-572331/199948 
XRPX Acc No: N99-421754 

Machine system for protecting information from unauthorised access by 

unauthorised programs 
Patent Assignee: SYMANTEC CORP (SYMA-N) 
Inventor: GRAWROCK D 

Number of Countries: 019 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

WO 9949380 Al 19990930 WO 99US5070 A 19990308 199948 B 




Priority Applications (No^ype Date) : US 9847316 A 19980324 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO 9949380 Al E 82 G06F-001/00 
Designated States (National): CA 

Designated States (Regional): AT BE CH CY DE DK ES FI FR GB GR IE IT LU 
MC NL PT SE 

Abstract (Basic) : WO 9949380 Al 

NOVELTY - Automatic decryption of file data on a per-use basis 
and automatic , optionally-delayed, re-encryption within a 
multi-threaded operating system, under which applications run 
real-time . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for; a 
method for use in a machine system; a machine system for maintaining 
confidential information in encrypted form; an automatic 
bubble-protection and decryption control mechanism; a machine 
implemented method for execution in an automated machine; a program 
distribution method; an instruction conveying apparatus for instructing 
a predefined, instructable machine to carry out bubble protection 
actions . 

USE - Machine-implemented method for automatic decryption of 
file data on per-use basis, and automatic , optionally-delayed, re- 
encryption within context of multi-threaded operating system, under 
which applications run in real time. 

ADVANTAGE - Prevents unauthorised Applets or similar programs from 
accessing information owner to try to access either at all or within a 
specified time period. 

DESCRIPTION OF DRAWING (S) - The drawing is a flow chart showing how 
a file -OPEN intercept operates in accordance with the invention. 

pp; 82 DwgNo 2/6 

Title Terms: MACHINE; SYSTEM; PROTECT; INFORMATION; UNAUTHORISED; ACCESS; 

UNAUTHORISED; PROGRAM 
Derwent Class: T01 

International Patent Class (Main) : G06F-001/00 
File Segment: EPI 
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WPI Acc No: 1997-385619/199735 

XRPX Acc No: N97-320997 

Automatic encrypting and decrypting system for secure file system 
has files automatically decrypted upon opening and encrypted on 
closing with possible use of exception lists and delayed encryption 

Patent Assignee: SYMANTEC CORP ( SYMA-N) 

Inventor: GRAWROCK D; LOHSTROH S; MCDONNAL W I 

Number of Countries: 

Patent . . , 

Patent No Kind Date Applicat No Ki ' V * 

WO 9726736 Al 19970724 WO 97US723 P. 

US 5699428 A 19971216 US 96586511 

US 



of Countries: 021 Number of Patents: C yf t ^ ~ j» in * /— 

Family: y&Cts ^&^LfU^ 

5796825 A 19980818 US 96586511 \ /g^CC*?^ 



EP 1008249 Al 20000614 EP 97905587 \ 

WO 97US723 ? } 

Priority Applications (No Type Date) : US 96586511 A 19960116; US 97944397 A 
19971006 

Cited Patents: US 5394469; US 5481701; US 5584022; US 5606610 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO 9726736 Al E 96 H04L-009/00 

Designated States (National) : CA JP 



Designated States (Re( 
NL PT SE 
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US 5699428 
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Abstract (Basic) : WO 9726736 A 

The system for maintaining confidential information, generally in 
an encrypted format whilst allowing for decryption into temporary 
plaintext form has a memory for storing digital data files. The memory 
holds encrypted confidential files and plaintext nonconfidential files. 
A decrypting mechanism is used for decrypting the confidential files. 

A recryption controller selects one of the files for decryption 
and then automatically eliminates the decrypted data at a later 
stage. The recryption controller responds to a supplied exclusion list 
which identifies one or more files that are not to be selected for 
decryption . 

USE/ADVANTAGE - Provides automatic file security control that 
avoids depending on human actions. Uses only limited computer power. 
Automatically eliminates plaintext versions of data immediately after 
use . 

Dwg. 1/17 

Title Terms: AUTOMATIC; SYSTEM; SECURE; FILE; SYSTEM; FILE; AUTOMATIC; OPEN 

; ENCRYPTION; CLOSE; POSSIBILITY; LIST; DELAY; ENCRYPTION 
Derwent Class: T01; W01 

International Patent Class (Main) : H04L-009/00 
File Segment: EPI 
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WPI Acc No: 1997-042612/199704 

XRPX Acc No: N97-035479 
Enciphered file sharing method for distributed computer system - involves 
distributing cipher key, assigned to specific directory, to user of 
second processing unit to access accessible directories 

Patent Assignee: FUJITSU LTD (FUIT ) 

Inventor: AKIYAMA R; HASEBE T; KIKUCHI H; TORII N 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 5584022 A 19961210 US 93160883 A 19931203 199704 B 

Priority Applications (No Type Date) : JP 92323950 A 19921203 
Patent Details : 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 5584022 A 16 G06F-015/00 

Abstract (Basic) : US 5584022 A 

The method involves assigning a cipher key to each of a series of 
directories storing encipher files by a first data processing unit 
which functions as a file server. A set of the directories are 
determined as accessible by the users of each of the data processing 
units. The cipher keys of the accessible directories, other than one 
predetermined specific directory, are enciphered. The cipher key which 
is assigned to the specific directory is distributed to the user of a 
second data processing unit. 

The files of the specific directory are enciphered and deciphered 
using the cipher key of the specific directory to access the specific 
directory of the first data processing unit. The cipher keys of the set 
of accessible directories enciphered by the cipher key of the specific 
directory are deciphered and stored in th specific directory to access 



the accessible direc^Bies other than the specific dilatory. 

USE/ ADVANTAGE - Reauces information managed on user side whilst 
maintaining the security. Automatically calculates cipher key of 
specific directory by specifying specific directory in file access 
support interface for deciphering. 

Dwg. 6/7 
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Derwent Class: T01 

International Patent Class (Main) : G06F-015/00 

International Patent Class (Additional) : G06F-009/00; G06F-009/04 
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007579075 

WPI Acc No: 1988-213007/198830 

XRPX Acc No: N88-162392 
Security system for personal microcomputer - combines hardware and 
software to provide tamper-proof protection of user and file access 

Patent Assignee: COMPUTER SECURITY CORP (COMP-N) 

Inventor: ALLEN M J; LANG LO I A J 

Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 4757533 A 19880712 US 85774821 A 19850911 198830 B 

Priority Applications (No Type Date) : US 85774821 A 19850911 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 4757533 A 36 

Abstract (Basic) : US 4757533 A 

The hardware component of the system is an expansion board for 
insertion into an expansion slot of the PC, and has a first EPROM chip 
containing four portions of machine code for initializing system 
function calls and for establishing the proper boot-processing of the 
PC; a second RAM chip serving as scratch pad memory; a third EEPROM 
chip storing passwords, audit trail log, protection and encryption 
system flags, and user-access rights; a fourth automatic encryption 
and decryption chip for files of the PC; and a fifth clock chip for 
the audit . 

The software component includes a batch file that runs a program i 
conjunction with the machine code on the EPROM of the expansion board 
ensuring access is gained only for valid users. 

0/19 

Title Terms: SECURE; SYSTEM; PERSON; MICROCOMPUTER; COMBINATION; HARDWARE; 

SOFTWARE; TAMPER; PROOF; PROTECT; USER; FILE; ACCESS 
Derwent Class: T01 

International Patent Class (Additional) : H04L-009/00 
File Segment: EPI 
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SYSTEM FOR ENCIPHERING AND DECODING FILE 

PUB. NO.: 01-277279 [JP 1277279 A] 

PUBLISHED: November 07, 1989 (19891107) 

INVENTOR (s): KOBAYASHI SHIGERU 

APPLICANT (s) : TOSHIBA CORP [000307] (A Japanese Company or Corporation), 



APPL. NO. : 
FILED: 
INTL CLASS: 
JAPIO CLASS: 

JOURNAL: 



(Japan) 

63-106267 T^JP 88106267] 
April 28, 1988 (19880428) 
[4] G09C-001/00; G06F-012/14 

4 4.9 (COMMUNICATION — Other); 4 5.2 (INFORMATION PROCESSING 
-- Memory Units) 

Section: P, Section No. 997, Vol. 14, No. 48, Pg . 86, January 
29, 1990 (19900129) 



ABSTRACT 

PURPOSE: To protect the secrecy of software by delivering an enciphered 
data file to a data processing means after decoding automatically at a 
stage making file access according to a file readout request from the 
data processing means. 



CONSTITUTION: When the amount of data requested to a data processing part 
20 of enciphered data in an enciphered data file 11 is stored in a data 
delivery area 21, a file readout completion request is issued from the data 
processing part 20, then, the enciphered data file 11 is closed. As a 
result, for example, in case of storing an enciphered source program in the 
enciphered data file 11, an application program can be generated by reading 
in the enciphered data file 11 as decoding the file by using the same key 
word as that in the generation of the source program by the data processing 
part 20. However, in the above process, no decoded program can be observed 
by a user. In such a way, it is possible to protect the secrecy of the 
software 
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CI PHERING/ DECIPHERING DEVICE AND METHOD USING PROGRAMMABLE LOGIC 
ELEMENT/DEVICE 



PUB. NO. : 
PUBLISHED: 
INVENTOR (s) : 

APPLICANT (s) : 

APPL. NO. : 
FILED: 
INTL CLASS: 
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10-055135 [JP 10055135 A] 
February 24, 1998 (19980224) 
KITAJIMA HIRONOBU 
FUEKI SHUNSUKE 

FUJITSU LTD [000522] (A Japanese Company or Corporation), JP 
(Japan) 

08-211227 [JP 96211227] 
August 09, 1996 (19960809) 
[6] G09C-001/00; G09C-001/10 
44.9 (COMMUNICATION — Other) 

:R102 (APPLIED ELECTRONICS — Video Disk Recorders, VDR) ; R138 
(APPLIED ELECTRONICS — Vertical Magnetic & Photomagnetic 
Recording) 



ABSTRACT 

PROBLEM TO BE SOLVED: To realize a ciphering/deciphering technology which 
is capable of changing an algorithm flexibly in accordance with the 
condition of a necessary secrecy or the like and which is of high speed. 

SOLUTION: When this device receives changing data, a hardware description 
language compiler 27 takes out a corresponding ciphering/deciphering 
algorithm file 24 from a database 23 to compile it by using a hardware 
description language library 26 generated by a hardware description 
language library generator 25. A configuration device 29 changes a 
ciphering/deciphering circuit by writing a mapping data object 28 generated 
in this manner to a programmable logic element /device 30. Since the 
constitution of the ciphering /deciphering circuit is automatically 

changed based on the changing data. the changing of a ciphering / 

deciphering algorithm is facilitated. 
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Electronic file encryption method for cryptographic system, involves 
executing change command completely by executing command relevant to 
encrypted file obtained using key value 
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Abstract (Basic) : WO 200052875 Al 

NOVELTY - A change command issued relevant to accessed file and is 
intercepted. The file is encrypted using encryption key value. The 
change command is then executed completely by executing the command 
relevant to the encrypted file. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
electronic file decrypting method. 

USE - For encryptographic systems used in managing electronic 
documents in server network of Internet. 

ADVANTAGE - Enables user to encrypt and decrypt documents easily, 
thereby raises authentication of files. 

DESCRIPTION OF DRAWING (S) - The figure shows block diagram of 
cryptographic system. 
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Abstract (Basic) : WO 9737316 A 

The data storage device includes a works table (300) with records 
representing several works, and a rights table (308) with records 
representing several rights. Each right is associated with a work and 
includes a date field. A computer software program identifies one of 
the works and searches the rights table. 

The search is carried out to determine, using the date field 
whether or not authorisation to the work is available. Each right in 
the rights table is limited to a particular type of use. The computer 
software program uses the types of use and a work relation table to 
determine authorisation. 

USE/ADVANTAGE - For authorising uses of intellectual property 
rights, real property interests, contract interests and similar items. 
Provides clearing house functions while accounting for problems of time 
variability, type of use and granularity. 
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Automatic encrypting and decrypting system for secure file system - has 
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Abstract (Basic) : WO 9726736 A 

The system for maintaining confidential information, generally in 
an encrypted format whilst allowing for decryption into temporary 
plaintext form has a memory for storing digital data files. The memory 
holds encrypted confidential files and plaintext nonconfidential files. 
A decrypting mechanism is used for decrypting the confidential files. 

A recryption controller selects one of the files for decryption and 
then automatically eliminates the decrypted data at a later stage. The 
recryption controller responds to a supplied exclusion list which 
identifies one or more files that are not to be selected for 
decryption . 

USE /ADVANTAGE - Provides automatic file security control that 
avoids depending on human actions. Uses only limited computer power. 
Automatically eliminates plaintext versions of data immediately after 
use . 
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Managing usage of application program by user on distributed computer 
system - in which executable version of application program received from 



server is generated upon^^rifi cation that user has predeSRnined access 
conditions 
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Abstract (Basic) : EP 778512 A 

The method for managing application program usage involves 
recognising a user request to access the application program, and 
transmitting a transmission version of the application program to a 
computer associated with the user for receipt and storage, only when 
predetermined access conditions have been determined as being 
satisfied, e.g. ownership of a valid license to an application builder 
module which performs verification and generation. 

The method further involves, prior to execution of the program, 
that the user is currently entitled to execute the received application 
program. An executable version of the application program is generated 
from the transmission version of the program, only if verification is 
confirmed . 

USE/ADVANTAGE - Managing distribution of licensed application 
programs stored on server over distributed computer system, e.g. for 
try-and-buy usage of application programs that expire after predefined 
trial privileges. Maintains control over program after program has been 
distributed to client computer from provider on information server. 
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Enciphered file sharing method for distributed computer system - involves 
distributing cipher key, assigned to specific directory, to user of 
second processing unit to access accessible directories 
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Abstract (Basic) : US 5584022 A 

The method involves assigning a cipher key to each of a series of 
directories storing encipher files by a first data processing unit 
which functions as a file server. A set of the directories are 
determined as accessible by the users of each of the data processing 
units. The cipher keys of the accessible directories, other than one 
predetermined specific directory, are enciphered. The cipher key which 
is assigned to the specific directory is distributed to the user of a 
second data processing unit. 

The files of the specific directory are enciphered and deciphered 
using the cipher key of the specific directory to access the specific 
directory of the first data processing unit. The cipher keys of the set 
of accessible directories enciphered by the cipher key of the specific 
directory are deciphered and stored in th specific directory to access 
the accessible directories other than the specific directory. 

USE/ADVANTAGE - Reduces information managed on user side whilst 
maintaining the security. Automatically calculates cipher key of 
specific directory by specifying specific directory in file access 
support interface for deciphering. 
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Application program management method for distributed systems - searching 

applications header file for operating system kernel 

dynamic-linked-library reference for replacement with intercept routine 
DLL reference 
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Abstract (Basic) : EP 667572 A 

The method of managing an application program utilisation by 
detecting attempted execution of any application program by the 
processor involves reaching an application program header of 
dynamic-linked-library-ref erences, and loading any 



dynamic-linked-librar^^DLL) routines identified in thePReader, into 
program memory. Program logic found in any of the DLL routines is 
executed . 

A DLL containing an operating system kernel permitting execution of 
the application program is loaded into program memory, only if at least 
one DLL routine satisfies management condition logic permitting 
execution of the application program. 

USE /ADVANTAGE - Managing attempted installation and/or use of 
software assets e.g. application programs in distributed or network 
environment, by detecting attempted invocation of execution of any 
application program. 
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Secure information retrieval from mass storage media - using decryption 
controller on SCSI bus which retrieves information from mass storage 
device, decrypts it and passes it to host computer 
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Abstract (Basic) : US 5394469 A 

The appts. for retrieving information packets from a mass storage 



device, at least some^ which are encrypted, has a digBPal bus that 
transmits address information, control information and data from a call 
initiating unit to one or more receivers. Each unit connected to the 
bus has an associated bus address. A host computer has a first address, 
a mass storage device a second and a decryption controller a third. The 
decryption controller has a control unit, a memory and a decryption 
unit . 

The host computer stores the third address as the mass storage 
device address and sends information requests to the decryption 
controller in lieu of the mass storage device. The decryption 
controller receives the requests and sends information requests to the 
mass storage device, stores the packets received from the mass storage 
device, decrypts encrypted portions as required and transmits the 
information packets, in decrypted form, to the host computer. 

USE/ADVANTAGE - Not susceptible to attack or compromise by user. 
Does not require reconfiguration of PC at user side. 
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Abstract (Basic) : 


SE 501128 


B 



A first encoding component (50), by means of a first algorithm, 
encodes the original identity to an updating identity. A second 
encoding component (50), by means of a reversible algorithm, encodes 
the updating identity to a storage identity, which is stored, together 
with corresp. describing information, as a post on the storage medium 
(30, 40) . 

A decoding component (50) , at the times when the storage 
identities are selected, replaces stored posts with new storage 
identities, and decodes the storage identities to recover corresp. 
updating identities. The second encoding component at the same time, by 
means of an altered reversible algorithm, encodes the recovered 
updating identities to new storage identities, which replace the 
earlier storage identities. 

USE /ADVANTAGE - Effectively recovers stored data information for 
both operative and strategic purposes. Achieves so-called longitudinal 
updating of strategic data information. 
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Abstract (Basic) : WO 9409567 A 

The longest and closest string in a history file (162a) is found 
prior to a current string (163) . A search algorithm finds the longest 
matching old string (MOS) in the history buffer and where two MOS ' s are 
found to have the same length, the algorithm selects the string closest 
to the present task. 

Linked lists speed the search. The linked lists define a fast-path 
array which points to all locations within the history buffer contg. a 
specified code sequence. Pointers to locations outside the history 
buffer (182. 4f) are optionally removed and their space returned to 
memory free space. 

USE - Computer-automated string matching applied to data 
compression using history buffer algorithm. 
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Abstract (Basic) : WO 9317393 A 

The method involves identifying, within the compressed data file, 
the given compressed data which correspond to the given non-compressed 
data identified by the data request. The given compressed data 
comprises less than all data in the compressed data file. The given 
compressed data is then decompressed to reconstruct the given 
non-compressed data. 

The method further includes providing the reconstructed 
non-compressed data in response to the data request, and caching the 
reconstructed non-compressed data. In response to a second subsequent 
data request, the data decompression operation is skipped. 

ADVANTAGE - Improved throughput and system transparency. 
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Abstract (Basic) : WO 9317378 A 

The method involves accessing 
to the current value at a current 



array entries in an array responsive 
location in the buffer. Each array 



entry identifies a va^p equal to the current value an^i location in 
the buffer prior to the current location. One or more array entries 
identify target strings. A length is determined, for each target 
string, to which the string matches the current string. The target 
string which matches the current string to a greatest length is 
identified, and the identification of the identified target string is 
provided . 

USE/ADVANTAGE - Locates a longest prior target string matching a 
current string in a data buffer. Improved speed. 
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Abstract (Basic) : WO 9220022 A 

The method involves the computer system processor maintaining a 
store of license authorisation for the software items. Each 
authorisation includes an indication of license management policy for a 
software item. The indication has sets of policy components granting 
alternatives of specified restrictive rights to selectively access and 
execute the software components. 

The processor can modifiy the specified restrictive rights of the 
policy of an identified license authorisation. The processor accesses 
the store using the filter to obtain information from the license 
authorisation for a selected software item in response to a node 
rquest. The node and software item identification are compared with the 
information to send a request grant or refused. USE /ADVANTAGE - For use 
in license management system to account for software product usage. 
Allows ne user node to use software produce an another node. Can be 
used with wide variety of software products from different vendors as 
long as all follow defined format. 

d 

Dwg. 1/4 6 

Title Terms: DISTRIBUTE; COMPUTER; SYSTEM; SOFTWARE; ITEM; MANAGE; METHOD; 

FILTER; FUNCTION; OBTAIN; INFORMATION; LICENCE; AUTHORISE; SELECT; 

SOFTWARE; ITEM; RESPOND; REQUEST; NODE 
Derwent Class: T01 

International Patent Class (Main) : G06F-001/00; G06F-015/21; G06F-017/40; 

G06F-017/60; H04L-009/00 
International Patent Class (Additional) : G06F-013/24 
File Segment: EPI 



1/5/12 

DIALOG (R) File 350: Derwent WPIX 

(c) 2000 Derwent Info Ltd. All rts. reserv. 

009271665 **Image available** 

WPI Acc No: 1992-399077/199248 

Related WPI Acc No: 1992-399078 

XRPX Acc No: N92-304404 
Distributed computer system license managing method - using product use 
authorisation structured to define license management policy allowing 
variety of license alternatives 

Patent Assignee: DIGITAL EQUIP CORP (DIGI ) 

Inventor: WYMAN R M 

Number of Countries: 036 Number of Patents: 010 



Patent No 


Kind 


Date 


Applicat No 


Kind 


Date 


Week 


WO 9220021 


Al 


19921112 


WO 


92US3608 


A 


19920501 


199248 


AU 9222470 


A 


19921221 


AU 


9222470 


A 


19920501 


199311 








WO 


92US3608 


A 


19920501 




EP 538464 


Al 


19930428 


EP 


92914135 


A 


19920501 


199317 








WO 


92US3608 


A 


19920501 




JP 6500878 


W 


19940127 


JP 


92511961 


A 


19920501 


199409 











vv w 


3ZUOJDUO 


A 


1 Q Q 9 n c, n 1 
1 y y £ U jU 1 


^| 


An 


u j y \j j ^ 


n 

D 


J. J^JUJt J 


an 




A 




lyyozy 


NZ 


9 4 9 697 

*i £. \J C. 1 


n 




M7 


9 4 9 £9 7 


A 


i yyzu jUd 


1 O Q C O C 

i y yo jb 




S7 4 Sfl7 Q 




1 QQft 04 9ft 


uo 


:? ± 0 y / DDZ 




1 QQl n c, n o 


i y yo^4 










fTC 
UO 


QA TCI Qfi/1 


A 

A 


1 QQ/l 1 0 O O 

± y y 4 ±£.z<L 












uo 




A 
A 


iyy Duyub 




FP 


S 4 64 

J J O 1 U *i 


O J. 


1 QQQ1 0 70 
-L J 1^ JV 


rp 


Q9 Q1 4 1 7^ 


A 
A 


I y y c UDU 1 


i y y y ud 












UjjDUo 


A 


i QQonc.ni 
iyy^u jui 








p 

Hi 


i Q GQOO 1 1 
± y y y\j z. ± 1. 


nr 




A 


1 QQoncm 


ly y y 1^ 










P D 

Hi C 


y i y ± fi IjD 


A 

A 


i QQonc.ni 

i yy^u jui 












WW 




A 

A 


i QQonQm 
1 y y £\) DU I 




JP 


3032788 


B2 


20000417 


JP 


92511961 


A 


19920501 


200024 










WO 


92US3608 


A 


19920501 





Priority Application 
19910628; US 91723 
19941222; US 95523 
Cited Patents: EP 33 
Patent Details: 
Patent No Kind Lan 
W0 9220021 Al E 
Designated States 
KP KR LK LU MG MW 
Designated States 
SE 

JP 3032788 B2 



s (No Type Date 
456 A 19910628; 
919 A 19950906 
2304; EP 398492 

Pg Main IPC 
79 G06F-001/00 
(National) : AT 
NL NO PL RO RU 
(Regional) : AT 

25 G06F-009/06 



): US 91697652 A 19910508; US 91722840 A 
US 91723457 A 19910628; US 94361884 A 



AU 9222470 A G06F-001/00 

EP 538464 Al E G06F-001/00 

Designated States (Regional) : AT 

SE 

JP 6500878 W G06F-009/06 

AU 659652 B G06F-015/21 



US 5745879 



20 G06F-017/60 



EP 538464 Bl E G06F-001/00 

Designated States (Regional) : AT 
SE 

DE 69228039 E G06F-001/00 



NZ 242627 



G06F-015/21 



Filing Notes 

AU BB BG BR CA CH DE DK ES FI GB HU JP 
SD SE 

BE CH DE DK ES FR GB GR IT LU MC NL OA 

Previous Publ . patent JP 6500878 
Based on patent WO 9220021 
Based on patent WO 9220021 
Based on patent WO 9220021 
BE CH DE DK ES FR GB GR IT LI LU MC NL 

Based on patent WO 9220021 
Previous Publ. patent AU 9220158 
Based on patent WO 9220022 
Cont of application US 91697652 
Cont of application US 94361884 
Based on patent WO 9220021 
BE CH DE DK ES FR GB GR IT LI LU MC NL 

Based on patent EP 538464 
Based on patent WO 9220021 



Abstract (Basic) : WO 9220021 A 

The method involves maintaining a store of license authorisations 
for licensed software items. Each license authorisation includes 
indication of license management policy for an item having sets of 
policy components. 

A reqiest is sent by a user to one of the software items to obtain 
permission to use the item. The requests identifies the user and item. 
In response, the store is accessed to obtain information from the 
license authorisation for the software item. The identification of the 
user and software item are compared with the information, and with 
constraints imposed by the sets of license management policy components 
to produce a grant or refused for the request. 

USE /ADVANTAGE - For managing use of and accounting for software 
produce items. Manangement policy having variety of alternative styles 
and contexts is provided. Reduced complexity. 
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Data compressor with direct look-up table indexing into history buffer - 
determines whether target string at target buffer location matches 
current string to output vector to target location 

Patent Assignee: SALIENT SOFTWARE INC (SALI-N) 

Inventor: CHAMBERS L L 

Number of Countries: 002 Number of Patents: 003 
Patent Family: 



Patent No 


Kind 


Date 


Applicat No 


Kind 


Date 


Week 


US 5155484 


A 


19921013 


US 91759226 


A 


19910913 


199244 


WO 9306661 


Al 


19930401 


WO 92US7707 


A 


19920910 


199314 


AU 9225803 


A 


19930427 


AU 9225803 


A 


19920910 


199332 








WO 92US7707 


A 


19920910 





Priority Applications (No Type Date) : US 91759226 A 19910913 
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AU 9225803 A Based on patent WO 9306661 

Abstract (Basic): US 5155484 A 

The apparatus includes appts . for maintaining a direct lookup table 
(DLT) array of DLT entries, each DLT entry being indexable in the DLT 
by a unique integer and identifying a location in the input data block. 
The apparatus further includes indexing appts. for using one or more 
bytes at a current location in the input data block as an integer to 
directly access a given DLT entry, contents of the given DLT entry 
identifying a target location in the input data block. 

The compressor determines whether a target string at the target HB 
location matches a current string at the current HB location. If they 
do not match, the compressor outputs a literal representing a datum at 
the current location. If they match, the compressor outputs a vector 
from the current location to the target string. 

USE/ADVANTAGE - In computer communications and virtual memory. 
Maximises compression and decompression speed. 
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US 4757533 A 36 

Abstract (Basic) : US 4757533 A 

The hardware component of the system is an expansion board for 
insertion into an expansion slot of the PC, and has a first EPROM chip 
containing four portions of machine code for initializing system 
function calls and for establishing the proper boot-processing of the 
PC; a second RAM chip serving as scratch pad memory; a third EE PROM 
chip storing passwords, audit trail log, protection and encryption 
system flags, and user-access rights; a fourth automatic encryption and 
decryption chip for files of the PC; and a fifth clock chip for the 
audit . 

The software component includes a batch file that runs a program in 
conjunction with the machine code on the EPROM of the expansion board 
ensuring access is gained only for valid users. 
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Installer machine for automatically installing operating system on 
computer, generates installation commands to serial port of computer via 
secondary interface 
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Abstract (Basic) : US 6094531 A 

NOVELTY - The installer machine (1) comprises a primary interface 
to receive instructions relating to installation job to be performed. A 
secondary interface receives data output from and outputs installation 
command to the serial port of the computer (3) . A processor which 
receives data from the secondary interface via the serial port 
generates installation commands. 

DETAILED DESCRIPTION - An installation command is a start sequence 
command which causes the computer to enter a boot ROM memory and causes 
the computer to output data from the serial port to the installer 
machine. An installation command other than start sequence command 
causes operating system (OS) to be automatically installed on the 
computer. An INDEPENDENT CLAIM is also included for a method to install 
an operating system on a computer. 

USE - Used for installing OS on computer. 

ADVANTAGE - The machine is capable of configuring several computers 
and installing OS on them either individually or simultaneously. The 
installer automatically installs OS without the need for human 
involvement during the installation process. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
network between installer and several computers. 

Installer machine (1) 

Computer (3) 
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Abstract (Basic) : US 6078999 A 

NOVELTY - Shadow copy of user data stream held by selected 
structured storages, is generated by opening selected storages. Names 
of selected storages, are added to transaction table stored in 
persistent secondary storage based on opened storages. One of the 
selected storage is last closed. Name of closed storage is erased. The 
shadow copies of data stream of selected storage whose names remain in 
table is deleted. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(a) shadow copies erasing system; 

(b) shadow copies erasing program stored in recording medium 

USE - For erasing shadow copies from persistent secondary storage 
for user data recovery in computer system for user data transaction 
processing during transfer of funds between bank accounts. 

ADVANTAGE - Makes shadow copies of data streams rather than 
structured storages to decrease amount of memory required to maintain 
shadow copies, hence strikes balances between simple implementation and 
minimizing memory requirement. More than one data stream can be renamed 
since the transaction can modify more than one stream before committing 
the predefined changes. 

DESCRIPTION OF DRAWING (S) - The figure depicts flowchart explaining 
the steps involved in user data recovery. 
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Abstract (Basic) 



US 6035379 A 



NOVELTY - One of streams of file system obj ect^P having user 

data, is opened in a write mode, and an unique internal name is 
assigned to the copy of the stream. Necessary changes are applied to 
the internal copy of the stream, as a part of the selected transaction. 
If it is detected than no other transaction is accessing the storage in 
which the stream is contained, the stream is deleted, else it is 
renamed. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
processing program. 

USE - For use in bank. 

ADVANTAGE - Reduces amount of memory required for storage, by 
producing shadow copies of the streams rather than structured storage. 

DESCRIPTION OF DRAWING (S) - The figure shows the flow chart 
illustrating the steps performed at the time of transaction, 
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Abstract (Basic) : US 5987572 A 

NOVELTY - If a memory access request is not active, a memory 
location identified by the pointer is read and decrypted and encrypted 
using respective keys (n,n+l) and the encrypted data is written on the 
identified memory location. 

DETAILED DESCRIPTION - On determining an active memory access 
request if address associated with memory access is greater or lesser 
than a pointer, encrypting or decrypting of the access memory is done 
using keys (n,n+l), respectively. 

USE - For secure computer system used in smart cards with advent of 
cyber cash, ATM machines, point of sales terminals which are commonly 
found in grocery stores, credit card processing systems, secured 
transaction terminals such as those employed in bank and other 
commercial institutions. 

ADVANTAGE - Since continuous decryption of data is performed with 
randomly changing key, record and playback threat and record and decode 
threat are both minimized. Since dynamic encryption interface is hidden 
from processor, memory device and to any software, any standard 
off-the-shelf memory can be configured with additional hardware and 
extensive modification. 

DESCRIPTION OF DRAWING (S) - The figure illustrates a computer 
system in which dynamic encryption interface is used. 
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Abstract (Basic) : US 5987464 A 

NOVELTY - Data (120) containing a program (34) and a potentially 
reusable data (30) is stored in a storage medium (70) following which 
data (122) containing a control data (126) is stored in the storage 
medium. When program of the data (120) is executed, the control data 
combines with potentially reusable data for producing data (128) 
containing newly indexed available information (130) on storage medium. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
patent file updating apparatus. 

USE - For search, retrieval, reporting, delivery and update of 
master patent database information and newly available information for 
both online and offline systems. 

ADVANTAGE - Utilizes renewal information and previous expiration 
information to increase subscription period. Offers automated clipping 
service to encourage potential use and easier access of information to 
the public. Reduces the search and retrieval time for accessing master 
database information and newly available information. 

DESCRIPTION OF DRAWING (S) - The figure shows the relationship of 
storage of first, second and third data on computer system. 

Potentially reusable data (30) 

Program (34 ) 

Storage medium (70) 

Data (120,122,128) 

Control data (126) 

Newly indexed available information (130) 
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Abstract (Basic): EP 915418 A 

NOVELTY - Proportional processor sharing in single and 
multi-processor involves initially assigning 1 tickets' to each of the 
processes in the system, such that each of the tickets entitles the 
process to use a processor for a period of time. 

DETAILED DESCRIPTION - Processor sharing involves initially 
assigning 1 tickets' to each of the processes (106) in the system, such 
that each of the tickets entitles the process (106) to use a processor 
(102) for a period of time. The operating system (108) allocates the 
processors (102) first to the process (106) with the highest number of 
tickets. As each process (106) or thread (107) finishes being executed 
for a predetermined amount of time, the tickets of that process/thread 
are adjusted accordingly and a new ticket process or thread is chosen 
for' execution. Tickets can be allocated to each process in the system. 

INDEPENDENT CLAIMS are included for; a method for sharing a 
processor between a number of threads of multi-threaded applications; a 
data structure stored in memory; a method of sharing a processor 
between a number of users and between a number of threads in a data 
processing system; a computer program product storing code; a computer 
data signal embodied in a carrier wave e and representing sequences of 
instructions; an apparatus that proportionally shares a processor 
between processes and between threads. 

USE - Implementing proportional sharing amongst single-threaded and 
multi-threaded applications in a single or multiple processor system, 
and implements hierarchical sharing among jobs or users in single or 
multiple processor systems. 

ADVANTAGE - Tickets can be assigned at user level and shared by all 
jobs of a particular user. DESCRIPTION OF DRAWING (S) - The drawing 
shows a number of single-threaded applications executing on a 
processing system. (100) Processing system; (102) Processor; (104) 
Memory; (106) Single-threaded applications; (108) Operating system; 
(109) Process scheduler. 
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Abstract (Basic) : WO 9917233 Al 

NOVELTY - The method involves monitoring write calls using a write 
filter and performing real-time secure data deletion of buffers. File 
creation operations are monitored and real-time secure data deletion of 
user files is performed when the file is to be overwritten. Set 
information operations are monitored and real-time secure data deletion 
is performed for truncated, shrunk or deleted user files. 

DETAILED DESCRIPTION - During operation it is determined whether 
the type of call intercepted is one that should be processed. If not, 
then in step (14), the original call is passed on through the file 
system. If the call should be processed, then in step (16), 
supplemental processing is performed to enhance the original call. In 
particular, in step (16), the original call can be enhanced to ensure 
real-time secure file deletion on the storage device. 

INDEPENDENT CLAIMS are included for: 

(a) a system for real-time secure data deletion in a system having 
NTFS file system 

(b) an apparatus for enhancing file system calls to file system 
structure of operating system 

USE - The present invention relates in general to the field of 
electronic systems, and more specifically to a method and apparatus for 
real-time secure file deletion. 

ADVANTAGE - The invention allows supplemental file management 
processes to be performed in a manner transparent not only to the user 
but also to the operating system. The operation is performed on ongoing 
basis transparently to the user of the system. Thus, secure deletion of 
files on storage devices is accomplished without relying upon periodic 
actions by the user. A further technical advantage of the present 
invention is that, for write calls, overhang of data in the existing 
file on the storage device is identified and overwritten as part of the 
real-time secure deletion process. The secure deletion of buffers, user 
files and other data in a WINDOWS NT (RTM) file system are 
automatically handled 

DESCRIPTION OF DRAWING (S) - The drawing illustrates a method for 
enhancing file system calls to file system structure. 
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Abstract (Basic) : EP 913770 A2 

NOVELTY - A memory (104) includes one or more multi-threaded 
applications (110) at least one of which contains threads (112). If a 
thread is blocked and the owner thread is also blocked, the blocked 
consumer thread transfers its right to execute for its remaining time 
quantum to another thread that is not the owner thread but that is in 
the same process (110) with no requirement for a process context 
switch . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for 
apparatus allowing sharing of time quantum and for a computer program 
product and data signal. 

USE - For computer system where a processor executes different 
parts (threads) of a program simultaneously. 

ADVANTAGE - Allows thread of process to share remaining quantum of 
process time allotted to it with other threads. Eliminates of 
requirement for process context switch and shortens time to transfer 
executing right. 

DESCRIPTION OF DRAWING (S) - The drawing is an example of 
multi-threaded applications executing in data processing system with 
single processor. 

Memory (104) 

Multi-threaded applications (110) 
Threads (112) 
pp; 20 DwgNo 1/6 
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Booting system for personal computers - establishes secure path between 
secure boot device and host processor based on electronic keying 
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Abstract (Basic) : WO 9815086 A 

The booting system includes a sub-system which prevents 
unauthorised replacement of boot-up firmware (e.g. BIOS (63)) embedded 
in modifiable non-volatile memory devices e.g. flash memory. The 
firmware device is contained in a secure boot device (54) which is 
responsive to a host processor (50) . 

The security protection is established by the encryption and 
decryption of a boot-up instruction using a secret key (64) shared by 
both the secure boot device (54) and the host processor (50). 

USE - Preventing unauthorised replacement of storage element 
containing executable code in boot-up firmware including operating 
systems and Basic Input and Output System (BIOS) in computing systems, 
e.g. PCs. 
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Abstract (Basic) : JP 9293021 A 

The method involves performing encipherment of a selected file 
among a set of files stored in a hard disc, using an encryption key 
word. The encryption key word is scrambled and a pair of scrambled 
versions are obtained using a secrete keyword input by the user and 
performing algorithm deformation of the secret keyword. The obtained 
two scramble versions of the encrypted keyword are stored in a memory. 

The stored two scramble version are converted into the two non- 
scramble versions. The obtained non-scramble versions are compared. The 
original encrypted keyword is able to be recovered correctly when the 
two non-scramble versions are in accordance. The selected file is 
non-enciphered when original encrypted keyword is recovered correctly. 

ADVANTAGE - Enables to protect file of hard disc reliably. 
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Abstract (Basic) : JP 9204330 A 

The method involves storing an user password (1070) in an encoding 
data area (1050) . An information file specified by the user is encoded 
with an authentication key generated by authentication key generated 
based on the user password. 

The encoded file is decoded by a decoder (1000) with the 
authentication key when an user accesses the file and the altered 
encoded file is stored. 

ADVANTAGE - Improves data security. 
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Abstract (Basic) : WO 9726736 A 

The system for maintaining confidential information, generally in 



an encrypted format wMst allowing for decryption int^^emporary 

plaintext form has a memory for storing digital data files. The memory 
holds encrypted confidential files and plaintext nonconfidential files. 
A decrypting mechanism is used for decrypting the confidential files. 

A recryption controller selects one of the files for decryption and 
then automatically eliminates the decrypted data at a later stage. The 
recryption controller responds to a supplied exclusion list which 
identifies one or more files that are not to be selected for 
decryption . 

USE/ADVANTAGE - Provides automatic file security control that 
avoids depending on human actions. Uses only limited computer power. 
Automatically eliminates plaintext versions of data immediately after 
use . 
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Disk drive with embedded data encryption 
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ABSTRACT EP 911738 A2 

An improved disk drive (DDI) ) is described in which an 
encryption/decryption circuit (4) is provided, connected to read/write 
means (9,13) of the drive, for encrypting data to be written onto, and 
decrypting data to be read from, the disk(s) (11). The drive control 
includes permanent security control features for restricting read/write 
access to the disk(s) (11) via the encryption/decryption circuit, for at 
least the data content of data files to be written thereto or read 
therefrom. Password-dependent security control is also provided which 
activates the encryption/decryption circuit only in response to receipt 
of a valid password input by a user, so that read/write access to the 
disk(s), in relation to at least the data content of data files, is 
restricted to holders of a valid password. 

ABSTRACT WORD COUNT: 127 
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.SPECIFICATION that encrypted data may be accessible to anyone is of 
little concern so long as no one can decrypt it and read it. 

Typically, software encryption methods do not operate automatically 
in real time. They rely on the user making a conscious decision to 
encrypt certain chosen files and are thus dependent on procedures and on 



.software application, such as word processing, may, on its own, create a 
backup copy of a file or a temporary file that the user may access if 
required. Unfortunately, these extra file copies pose a risk from a 
security point of view since backup files and temporary files can be 
overlooked when an instruction is given to encrypt the primary file . 
Operating systems can also make copies of data as a safeguard against 
system failure. Files (called core dumps) consisting of the contents of 
the computer memory at the time of the system failure are written to the 
system disk drive. . . 
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ABSTRACT EP 173103 A2 

IC Card and an identification system thereof. 

A plurality of secret data for identifying IC cards is stored in a 
memory which is provided in an IC circuit incorporated in the IC card 
(11). When an IC card (11) is supplied to an issuer from a manufacturer, 
a sealed sheet (17) on which a production master key ( PMK) data is 
printed is separately sent to the issuer from the manufacturer. The PMK 
data printed on the sealed sheet (17) is supplied to the IC card (11) to 
be compared with a PMK data stored therein. The entrance of a primary 
account number (PAN) data to the IC card is allowed only when a 
coincidence signal is obtained. An initialization personal identification 
number (IPIN) data is printed on a sealed sheet (27) which is separately 
sent to a card holder from the issuer. At the card holders stage, the 
IPIN data and an IPIN data stored in the IC card (11) are compared with 
each other. The registration of the personal identification number to the 
IC card (11) may be performed only when a coincidence signal is obtained. 
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.SPECIFICATION to the issuer and card holder, respectively. Preferably, 
these codes are printed in sealed mailers of the type in which the 
contents are not known until the sealed mailers are opened . Such 
mailers are well known in the art. This prevents access to the "PMK" 
and "IPIN" codes by intermediaries in the issuance procedures, and 
increase security. 

At issuance of the IC card by the issuer, in addition to the "PAN" 
code, the issuer preferably enters other... 

.operation. Alternatively, this information can be input automatically by 
a data processing system. The code "CA 11 can be randomly generated by a 
random data generator and automatically input into the IC card 11. At 
the issuer station 2, the code "PAN" can be pre-set in the issuer's data 
bank, and can be read out from the issuer's data bank, and automatically 

stored in the IC card 11. This would eliminate the necessity of the 
operator keying in the "PAN" at the keyboard 24 of the issuing. . . 
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Claims 
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English Abstract 

A server/client media file distribution system is provided in which the 
server system (12) is adapted to receive transmission requests from 



clients (14), status il^B>rmation from a network (16), a^^ protocol 
information from each client (14). The server (12), based upon this 
information, adaptively transmits a given media file stored therein to 
one or more clients (14) using the optimal transmission speed and/or 
network protocol based on the network status information and protocol 
information. Additionally, the present invention provides a looping file 
arrangement in which a plurality of clients can receive the same media 
file on multiple network channels, without the need to provide multiple 
copies of the same media file for each request of that file. 

French Abstract 

L' invention concerne un systeme serveur/client de distribution de 
fichiers multimedia, dans lequel le systeme serveur (12) est concu pour 
recevoir des demandes de transmission provenant de clients (14), des 
informations d'etat provenant d'un reseau (16), et des informations de 
protocole emanant de chaque client (14). Le serveur (12), en fonction de 
ces informations, transmet de facon adaptative un fichier multimedia 
donne heberge par ledit serveur a un ou plusieurs clients (14); il 
utilise a cet effet la vitesse de transmission optimale et/ou le 
protocole reseau optimal en fonction des informations d'etat et des 
informations de protocole. En outre, la presente invention concerne un 
agencement de fichiers en boucle dans lequel une pluralite de clients 
peuvent recevoir le meme fichier multimedia sur plusieurs canaux de 
reseau, sans avoir a fournir plusieurs copies du fichier multimedia pour 
chaque demande de fichier. 

i Legal Status (Type, Date, Text) 

Publication 20001026 Al With international search report. 

Fulltext Availability: 
Detailed Description 

Detailed Description 

... etc.) to 8 purchase the media file. Server 12 begins transmission of 
the media file, in 9 accordance with the above-described embodiments. The 
media file is temporarily stored in temporary storage 72. 
11 Upon the appropriate command from user, the media file temporarily 
residing 12 in temporary storage 72 is accessed to be played. Upon such 
commands , the media 13 file is sent to decompression and 
de-encryption 74 to decompress and/or de-encrypt 14 the media file . 
Decompression and de-encryption includes appropriate hardware/software to 
achieve the stated functionality. Of course, decompression 16 hardware 
and software are adapted to decompress a... means to generate a unique 
passwordable encryption information. This 24 information can include a 
user-supplied password, or, alternatively, may include a I serial number 
automatically generated by system 24 f . The encryption information is 2 
forwarded to the server along with the media file request commands, and 
the server 3 enerypts the file accordingly, using, for example... 
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English Abstract 

A system and method for encryption and decryption of files. The system 
and method operate in conjunction with the file system to transparently 
encrypt and decrypt files in using a public key-private key pair 
encryption scheme. When a user puts a file in an encrypted directory or 
encrypts a file, all data writes to the disk for that file are encrypted 
with a random file encryption key generated from a random number and 
encrypted with the public key of a user and the public key of at least 
one recovery agent. The encrypted key information is stored with the 
file, whereby the user or a recovery agent can decrypt the file data 
using the private key thereof. When a proper private key is used, 
encrypted reads from the disk are decrypted transparently by the file 
system and returned to the user. 

French Abstract 

L' invention a trait a un systeme et a un procede permettant de crypter et 
decrypter des fichiers. Ce systeme et ce procede fonctionnent en 
association avec le systeme de fichiers dans le but de crypter et 
decrypter des fichiers de maniere transparente grace a un systeme de 
cryptage a deux cles: cle publique-cle privee. Lorsqu ' un utilisateur 
introduit un fichier dans un repertoire crypte, ou lorsqu 'il crypte un 
fichier, toutes les ecritures de donnees sur le disque qui sont relatives 
a ce fichier sont cryptees avec une cle de cryptage de fichiers aleatoire 
generee a partir d'un nombre aleatoire et cryptee avec la cle publique 
d'un utilisateur et la cle publique d'au moins un agent de recuperation. 
Les informations relatives a la cle cryptee sont stockees avec le 
fichier. L ' utilisateur ou un agent de recuperation peut ainsi decrypter 
les donnees du fichier grace a sa cle privee. Lorsqu* une cle privee 
appropriee est utilisee, les lectures cryptees sont decryptees a partir 
du disque de maniere transparente par le systeme de fichiers et renvoyees 
a 1 ' utilisateur . 

Fulltext Availability: 
Detailed Description 

Detailed Description 

of the file to encrypt at step 2200, and this call translates into a 
call to the EFS service 50 to do the operation. At step 2202, the EFS 
service 50 opens the file on the user's behalf, makes a backup copy 
for crash recovery purposes and at step 2204 marks it for encryption by 
issuing the SET-ENCRYPT file control (FSCTL) . At step 2206, the EFS 
service 50 then reads data from each stream in the copy and writes the 
data back to the original file at step 2208. Note that during the write 



operation, because th^^icryption bit is set, the data^R 
automatically encrypted before being written to the disk. The process 
is repeated via step 2210 until all data streams are written. If this 
call completes successfully (step. . . 
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English Abstract 

A computerized system and an associated method for optimally controlling 
storage and transfer of computer programs between computers on a network 
to facilitate interactive program usage. In accordance with the method, 
an applications program is stored in a nonvolatile memory of a first 
computer as a plurality of individual and independent machine- executable 
code modules. In response to a rquest from a second computer transmitted 
over a network link, the first computer retrieves a selected one of the 
machine-executable code modules and only that selected code module from 
the memory and transmits the selected code module over the network link 
to the second computer. 

French Abstract 

L' invention concerne un systeme informatise et un procede associe pour le 
controle optimal de la mise en memoire et du transfert de programmes 
inf ormatiques entre ordinateurs, sur reseau inf ormatique, en vue de 
faciliter 1 ' utilisation interactive des programmes. Le procede consiste a 
enregistrer un programme d 1 applications dans une memoire non volatile 
d'un premier ordinateur, sous la forme de plusieurs modules de code 
individuels et executables par machine de maniere independante . En 
reponse a une demande d'un second ordinateur, transmise sur une liaison 
du reseau, le premier ordinateur recupere dans la memoire un module 
determine, parmi les modules de code susmentionnes , et exclusivement ce 
module, pour le transmettre au second ordinateur via la liaison de 
reseau. 



Fulltext Availability: 
Detailed Description 



Detailed Description 

... request matches a user authentifi cation code in the stored list. 

Where an incoming request for a machine-executable code module is 
contained in an encryption packet, the server decrypts the 
encryption packet prior to the comparing of the user authentif ication 
code in the request with the list of user authentif ication codes in the 
memory . 

Encrypting and decrypting of encryption packets, as well as the 
checking of user authentif ication codes, may be performed by the 
secondary server (s). Whatever programming or data required for carrying 
...encryption keys are selected from a plurality of keys stored in an 
area 62 of a nonvolatile memory 64 of user computer 12. Again, the 
encryption /decryption process at user computer 12 can be handled by 
a plug-in code module performing the ftinctions of encryption/decryption 
unit 60 and memory area 62. The header... CRS extension) group A group 
file (TenCORE nameset with GRP extension) nameset A gentral purpose 
nameset file (TenCORE nameset with NAM extension) roster A roster file 
(TenCORE nameset with RTR extension) source A source file (TenCORE 
nameset with. SRC extension) studata A student data file (TenCORE 
nameset with. SDF extension) tpr A Producer file (TenCORE nameset with 
TPR extension) binary A binary file (TenCORE nameset with BIN 
extension) file An operating system file dir An operating system 
folder or directory dataset A TenCORE dataset tree Catharon tree-file 
default The default type for the container block A data block (in a 
nameset or tree-file ) folder A folder (in a time-file ) DESTROY 
RESOURCE (CkfXP-DestroyRsrc) -. This packet destroys the specified 
resource. The same rules regarding user authentication apply to this 
packet as apply to the CNIXP...to the 2 byte value in XI. 

if X0 > xi 

exchang global , varloc (XO) ; global , varloc (XI) ;2 endif exec Executes a 
DOS program or command . 

exec keyword 

command executes a program or command through the DOS command 
processor, or provides access to the DOS prompt file executes a 
program directly Descriptions exec command [, all I memorySize Provides 
access to the DOS command line prompt. To return to TenCORE, type 
exit at the DOS prompt. 

DOS memory not currently used by TenCORE is available for use by programs 
...by temporarily removing most of TenCORE. If a memory size is 
specified, the system attempts to free the specified number of kilobytes 
of memory. 

The file form of exec is more efficient than the command form as the 
DOS command processor is not loaded. This form also allows access to 
error reports for the executed program (the command form provides error 
reports for the DOS command processor) . 

Examples 

The following defines are used for. . . 
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English Abstract 

A system is disclosed for automatically distributing secured versions 
(*Sys D key*) of a file decryption key (Sys D key) to a plurality of file 
users by way of the file's security label. The label is defined to 
contain a plurality of Access­ Control­ Entries Records (ACER'S) 
where each ACER includes a respective secured version (*Sys D key*) of 
the file decryption key. Each such secured version (*Sys D key*) is 
decipherable by a respective ACER private key. Each ACER may include 
respective other data such as: (a) ACER­ unique identifying data for 
uniquely identifiying the ACER or an associated user; (b) decryption 
algorithm identifying data for identifying the decryption process to be 
used to decrypt the encrypted * DATA* portion of the file; and (c) special 
handling code for specifying special handling for the code­ containing 
ACER. The label is preferably covered by a digital signature but includes 
an extension buffer that is not covered by the digital signature. Users 
who wish to have an ACER of their own added to the label may submit 
add­on requests by writing to the extension buffer. 

French Abstract 

Systeme assurant une distribution automatique des versions protegees 
(*Sys D key*) du code de dechiffrage (Sys D key) pour un fichier a une 
pluralite d ' utilisateurs de ce fichier, par 1 ' intermediaire des labels de 
securite du fichier. Le label est defini de maniere a contenir une 
pluralite d' enregistrements entrees de gestion d'acces 

( Aces s& shy; Control­ Entries & shy; Records : ACER) dans laquelle chaque 
ACER contient une version protegee respective (*Sys D key*) du code de 
dechif f rement du fichier. Chacune de ces versions protegees (*Sys D key*) 
est dechif frable par un code prive ACER respectif . Chaque ACER peut 
contenir d'autres information respectives telles que: (a) donnees 
d' identification propres a l'ACER, pour identifier exclusivement l'ACER 
ou un utilisateur associe; (b) donnees pour identifier l'algorithme de 
dechiffrage afin d' identifier la procedure de dechiffrage qui doit etre 
appliquee pour dechiffrer la portion * DATA* chiffree du fichier; (c) un 
code de traitement specifique pour specifier un traitement particulier de 
l'ACER contenant le code. Le label est de preference couvert par une 
signature numerique mais comprend egalement une zone tampon d' extension 
qui n'est pas couverte par la signature numerique. Les utilisateurs qui 
desirent que leur propre ACER soit ajoute au label peuvent formuler des 
demandes d'adjonction en ecrivant au tampon d' extension. 

Fulltext Availability: 
Detailed Description 

Detailed Description 

... if path 642 had been taken, the key-containing code 565a is 
symmetrically uncovered with the user's password key in step 654. 



At subsequent step 660, the uncovered Sys-D-key** is applied to input 
325 of D - unit 320 for decrypting the *FILE DATA* portion 502a of the 
requested file . 

Following successful decryption, step 670 returns control to the 
operating system for normal handling of the remainder of the OPEN FILE 

request. In one embodiment, the label-using program 600 forms a 
complementary part of the SYSTEM FOR AUTOMATIC DECRYPTION OF FILE 
DATA ON A PER-USE BASIS as disclosed -50 in the above-referenced U.S. 
Application Serial No. 08/586,511. 

The above . . . 
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English Abstract 

A unified system of programming communication. The system encompasses 
prior art communications (such as, for example, television, radio, 
electronically transmitted print, and computer communications) and new 
user specific mass media. Within the unified system, computer system 
means (205) and methods provide capacity for generating relevant user 
specific information simultaneously at each station (26) of a plurality 
of subscriber stations (26) . 

French Abstract 

Systeme unifie de communication a programmation regroupant les 
communications de l'art anterieur (telles que par exemple la television, 
la radio, 1' impression transmise electroniquement , et les communications 
par ordinateur) ainsi que les nouveaux mass medias specifiques aux 
ut ilisateurs . Dans le systeme unifie, des moyens (205) et procedes 
mettant en oeuvre des systemes d ' ordinateurs ont la capacite de produire 
des informations specifiques a un utilisateur particulier, simultanement 
a chaque poste (26) d'une pluralite de postes d f abonnes (26) . 

Fulltext Availability: 
Claims 

Claim 

. . . set, and it executes said set as an assembled, machine language 
program in a fashion well known in the art. 



Under control of said program instruction set and accessing the 



subscriber's containec^^rt folio data file for informa^Rn in a fashion 
well known in the art, microcomputer, 205, calculates the performance of 
the subscrtiber ' s stock portfolio and constructs a graphic ... embodiment , 
said constant number is two, alv, headers consist of two bits binary 
information, and 102commands are identified by one of three binary 
headers: 

- a command with an execution segment alone; 00 - a command with 
execution and meter-monitor segments; and 

.01 - a command with execution and meter-monitor segments that is 
followed by an information segment. 

Execution segment information includes the subscriber station apparatus 
that the command of... the next signal word immediately following said 
signal word in which said last segment information bit occurs. (For 
reasons that relate to detecting end of file signals and are discussed 
more fully below, in the preferred embodiment a complete signal word of 
padding bits is transmitted after any given instance of... of file signal; 
in other words, said match means that an end of file signal has 
Sewenidetected . ) Not resulting in a match causes said valve 
automatically to set the information of said EOFS Complete Flag to (Not 
resulting in a match means said 

- EOFS WORD is not the last EOFS WORD ... Location . 

TO In this fashion, said valve processes each successive signal word to 
detect those particular uninterrupted series of EOFS WORDs that 
constitute end of file signals. 

As described above, determining, under control of said process-EOFS-WORD 
instructions , that the value of the information at said EOFS Complete 
Flag is "0" means that an end of file signal has been detected. 
Determining, under control of said instructions , that said value is "0" 
causes said valve to execute particular complete-signal-detected 
instructions . Said instructions cause said valve to inforrm said 
external receiving apparatus of the presence of an end of file signal 
in a fashion that is the preprogrammed fashion of the microprocessor, 
buffer/comparator, or buffer of which said valve is an adapted component. 

As... follows said X bits, continues through the last bit of said segment, 
and is, in the "One Combined Medium" application, the information of said 
program instruction set. 

Automatically, SPAM-conti oiler , 205C, executes said load-run 1/502 
and-code instructions . 

(No change takes place between controller, 39, and SPAM-controller , 
205C,-in the information of the execution segment of the first combining 
synch command . Thus the binary image of the particular 

controlled-f unction-invoking information that said information matches at 
controller, 39- more precisely, the aforementioned particular 
this-message . . .valve. 

Said instzm=tion causes said valve to set the information at saiWEOl s 
S3WCSXtCounter to HOOOOOOOOH without transferring any inf ormatdmmri of 
said detected end of file signal; to initiate 101 transm&plusmn ; s zAmTrt 
of the aforementioned complete-and-waiting information to the CPU of 
SPAM-controller, 205C, as an interrujOsignal ; and to wait for a control 
instruction from SPAM-controller, 205C, before processing next inputted 
information . 

Then SPAM-controller, 205C, commences executing the code portion of said 
load-run-and-code instructions . The instructions of said portion 
cause SPAM-controller, 205C, to sompare the information at said 
SPAM-header memory to particular load-run-and-code-header information 
that . . . 



..results (which indic£^ps that said first message contaTPR meter-monitor 
information) . Said match causes SPAM controller, 205C, to execute 
particular preprogrammed evaluate-meter-monitor-f ormat instructions and 
locate program-un-it instructions . Under control of said it- 
instructions and in a fashion that is described more fully belbw.i 
SPA-m-controller, 205C, locates the Hprogram unit identification codeH 
information in the information of the metar- — monitor segment stored at 
said MMS-memory. Then said cod, portion instructions cause 
SPAM-controller , 205C, to Place said code information at particular 
SPAM-first precondition register memory. In so doing, SPAM-controller 
completes said load-run ... value of the integer information at said 
working memory. (On the other hand, if the information at said 
SPAM-Flag-working memory is "i", said command information only 
partially fills the last of a whole number of signal words exactly; MOVE 
bits fill the remainder of the last of said words... Flag working memory 
to particular continueQ information that is "0". 

Not resulting in a match means that, under control of 11.3 said 
commence-transf er instructions , controller, 39, has transferred all 

command information of said "00" header message and no possibility 
exists 'that a full signal word of padding bits ends said message. 
Accordingly, not resulting in ... instance of broadcast programming. If, in 
a fashion described below, said specified information matches particular 
other unit and-number information, said conditional-overlay-at-205 

instructions cause SPAM controller, 205C, so to execute "GRAPHICS ON". 
Accordingly, said second command is one example of a specified 
condition command . 

In order to determine whether said specified information matches said 
other information, SPAM-pontroller , 205C, must locate said specified 
information. More precisely, SPAM-controller, 205C...from matrix switch, 
391, decryptor, 39K, decrypts said information, using decryption key Z, 
in the aforementioned 01-or-l 1-header-mespage fashion and transfers the 

decrypted 46 7* information to buffer, 39G. The aforementioned decrypt 
-in-a 01-or-l 1-header-message-f ashion instruction causes decryptor, 39K, 
to transfer the first H bits . received from matrix switch, 391, without 
decrypting ... all remaining command information and padding bits in said 
first message in the fashion that applies to a SPAM message that contains 
meter-monitor information. Automatically , control processor, 39 J, 
receives and processes decrypted length token information. 

Automatically , control processor, 39J, receives and records additional 
SPAM signal words at said SPAM-input-signal memory until the quantity of 
SPAM words recorded at said. . . 
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English Abstract 

An intelligent portable interactive personal data system is disclosed. A 
microprocessor (1100) with memory is contained within a transaction 
card-shaped housing (10) . An alphanumeric keypad (20) and alphanumeric 
display (25) is located on a surface (15) of the housing (10) . At least 
one port (1190) within the housing (10) is provided for the input and 
output of information. An operating system is stored in the memory to 
control the operation of the system through the microprocessor (1100) . 
The operating system provides a device (1115) for generating a plurality 
of messages on the display (25) that prompts the user during the 
operation of the system. Un systeme portatif, intelligent et interactif 
de donnees personnelles consiste en un microprocesseur (1100) avec 
memoire contenue dans un logement (10) en forme de carte de transaction. 
Un clavier alphanumerique (20) et un affichage alphanumerique (25) sont 
amenages sur une surface (15) du logement (10). Au moins un point d'acces 
dans le logement (10) est prevu pour 1' entree et la sortie 
d ' informations . Un systeme de f onctionnement est stocke dans la memoire 
pour commander le f onctionnement du systeme par 1 1 intermediaire du 
microprocesseur (1100). Le systeme de f onctionnement utilise un 
dispositif (1115) produisant plusieurs messages sur l 1 affichage (25) et 
que 1 ' utilisateur peut visualiser pendant le f onctionnement du systeme. 
Fulltext Availability: 
Detailed Description 

Detailed Description 

may call individual routines to test the security for the commands, 
and then proceed with the command processing itself. 

The selected command routine is then accessed by selecting the 
corresponding command routine in the OS. 

In a preferred embodiment the following commands may be used to secure 
and access the files stored in memory INQUIRY - Get card type CREATE 
- Create file FIND - Find a named file WRITE - Write a data record 
WRITENC, - Write an encrypted data record WRITER - Write key record READ 
DATA - Read a data. . . 

...add more commands in the future, and to provide a means to add functions 

to existing cards, by using the memory to store user definable 
subroutines , (e.g. encryption algorithms, etc.). The INQUIRY command 
(FIG. 10H) returns information about the card. The data returned includes 
the revision level of the operating system, the card. . . 
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..SPECIFICATION The above described architecture for delivery also 
facilitates security. A document can remain encrypted on the server until 



a recipient presents ^Jalid key to access and decrypt^? document . 

This key is presented as encoded in part of the PURL . Alternatively, the 
PURL specifies that a key must be retrieved, in which case the server 
requires that the recipient present a unique password to decrypt the 
document. In the first case, retrieval of the encrypted document is a 
one-step, automatic process because the key is encapsulated in the 
PURL. 

PURL Implementation. 

First, consider the potential construction of a PURL. The following 
diagram outlines one specific... 
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... a defined channel. 

At the upper layers such as Application, Transport and Network ISO layers 
of the TCP/UDP/1P data messages, the data is encrypted and transported 
with a higher level E-DNA (Electronic - Deterrence Network Address 
Access) protocols. The average absolute and relative predictable time and 
the measured time... 
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well-known Vernam One Time Pad Cipher to be the only theoretically 
unbreakable cipher.") Basic manipulation of the Standard Operations Form 
is described below. 

To Encrypt a file quickly :- Click Auto Key. Then click Edit Key. 
Then change some of the digits in the 90 di it panel. It is not 
compulsory to change some of the digits, but it is wise to... 
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Detailed Description 
Claims 

English Abstract 

The invention provides an improved, machine-implemented method and 
apparatus for automatic decryption of file data on a per-use basis 
and automatic , optionally-delayed, re-encryption within the context 
of a multi-threaded operating system under which applications run in 
real- time where further provisions are made for preventing unauthorized 
applets . . . 

...access either at all or within a specified time period. Program 
Inclusion or Exclusion Lists and/or program-approving algorithms are 



employed for automatid^pLy denying access to files if^equested via 

programs (e.g., applets) whose names are not identified for approval by a 
program-approving list or whose names are not otherwise... 

. .of the requested file) . Such program- directed protection is referred to 
herein as "bubble protection" because only programs within an approved 
bubble are allowed intelligible access to files via the OTF 
recryption mechanism. In addition to excluding unauthorized programs from 
access to files via the "on-the-fly recryption" mechanism, the 

access rights to each specific file are further guarded. Individual 
users are asked to provide their respective "private" keys before being 
given access to a file 's access key. A user may have logged into 
the system but not given permission to use his/her "private" key at the 
time connection is made. . . 



Detailed Description 

SYSTEM FOR INTERCEPTING FILE ACCESSES AND FOR AUTOMATIC DECRYPTION 

AND 

RE-ENCRYPTION OF FILE DATA ON A PER-USE BASIS 
BACKGROUND 

1 . Field of the Invention 

The invention relates generally to thesfield of securing stored digital 
data from unauthorized. . . M completes, the OS kernel 134 will be asked to 
'terminate 1 that application program. 

In accordance with the invention, the interceptable CALL'S to the file - 
OPEN and file -CLOSE services of the operating system are intercepted 

and acted upon to provide automatic and selective, 'on-the-fly 
recryption 1 . The interceptable CALL ! s to the program LAUNCH and 

program-TERMINATE services of the operating system are also intercepted 

and acted upon to provide specialized. . . 

...arrow-headed symbol 174 represents the respective, apparent decryption 
of file data section 161b to phantom plaintext area 161d during the 
intercepted CALL to the file -OPEN service, the actual decryption of 
samplings of file data section 161b to real plaintext area 175 during 
the CALLs to read primitives of the OS, the actual encryption of 
samplings of real plaintext ... special handling for the program-LAUNCH and 
program- TERMINATE services may be found in the above-cited, U.S. Patent 
5,699,428 (SYSTEM FOR AUTOMATIC DECRYPTION OF FILE DATA ON A PER USE 
BASIS AND AUTOMATIC RE-ENCRYPTION WITHIN CONTEXT OF MULTI -THREADED 
OPERATING SYSTEM UNDER WHICH APPLICATIONS RUN IN REAL-TIME) and these 
need not be repeated here. 



What is of importance... 



Claim 

... the files stored in said memory [1501 and for causing the decrypting 
mechanism [2401 to decrypt data contained in the selected file [161] and 
for automatically later eliminating the decrypted data, (c.l) wherein 
said recryption control means is responsive to a supplied exclusion list 
[1561, the exclusion list identifies one or more files in. . . 

...1531 that are not to be selected by the recryption control means for 
decryption, and the recryption control means accordingly does not select 
the excluded files for decryption by the decrypting mechanism; (d) an 
interceptable access mechanism [1811 through which data of an 
identified file is accessed by identifiable, requesting programs; (e) 
bubble-control means [154,162,2021 coupled to intercept [2oll data access 
attempts made through said interceptable access mechanism by. . . 

. . .wherein the bubble-control means includes deny/approve means 

[400, 457a, 4231 for testing the intercepted data access attempts and 
responsively denying or approving data access to the data of an 
identified subset of said files based on the identity of one or more 
access -attempting programs, and (e.2) wherein a denial [2051 by the 
bubble-control means prevents the decrypting mechanism [2401 from 45 
decrypting data contained in the corresponding one or more files for 



which access was atte^Jted. 

29. A machine system [lool according to Claim 28 further comprising: (g) 
an encrypting mechanism [4801 for encrypting plaintext data into 
ciphertext data... 

...data contained in the selected file [1611. 

30. In an automated machine [1001 for executing one or more application 
programs [1701, where the application programs access file data of a 
plurality of stored files [153,1611 by causing interceptable file - 

OPEN requests [isil and file -CLOSE requests [1831 to be sent to an 
operating system of said machine, and where data within a subset of the 
plurality of stored files is encrypted ; an automatic bubble 
-protecting and decryption control mechanism [2001 comprising: 

(a) OPEN intercept means [2011 for intercepting said interceptable 
file-OPEN requests; (b) selective OPEN continuance means 
[202, 210, 212, 2141. . . 



8/3, K/6 (Item 4 from file: 349) 

DIALOG ( R) File 34 9:PCT Fulltext 

(c) 2000 WIPO/MicroPat . All rts. reserv. 

00632801 

INTEGRATED BUSINESS SYSTEM FOR WEB BASED TELECOMMUNICATIONS MANAGEMENT 
SYSTEME D'ECHANGES COMMERCIAUX INTEGRES POUR LA GESTION DE 
TELECOMMUNICATIONS SUR LE WEB 

Patent Applicant /Assignee : 

BARRY B Reilly, BARRY, B., Reilly , 310 Cliff Falls Court, Colorado 

Springs, CO 80920 , US 
CHODORONEK Mark A, CHODORONEK, Mark, A. , 6508 Trillium House Lane, 

Centreville, VA 20120 , US 
DeROSE Eric, DeROSE, Eric , 3151 Anchorway Court &H, Falls Church, VA 

22042 , US 

GONZALES Mark N, GONZALES, Mark, N. , 9158 Pristine Court, Manassas, VA 
20110 , US 

JAMES Angela R, JAMES, Angela, R. , 7004 Florida Street, Chevy Chase, MD 
20815 , US 

LEVY Lynne, LEVY, Lynne , 2514 Iron Forge Road, Herndon, VA 20171 , US 
TUSA Michael, TUSA, Michael , 12 Mulberry Street, Ridgefield, CT 06877 , 
US 

Inventor ( s ) : 

BARRY B Reilly, BARRY, B., Reilly , 310 Cliff Falls Court, Colorado 

Springs, CO 80920 , US 
CHODORONEK Mark A, CHODORONEK, Mark, A. , 6508 Trillium House Lane, 

Centreville, VA 20120 , US 
DeROSE Eric, DeROSE, Eric , 3151 Anchorway Court &H, Falls Church, VA 

22042 , US 

GONZALES Mark N, GONZALES, Mark, N. , 9158 Pristine Court, Manassas, VA 
20110 , US 

JAMES Angela R, JAMES, Angela, R. , 7004 Florida Street, Chevy Chase, MD 
20815 , US 

LEVY Lynne, LEVY, Lynne , 2514 Iron Forge Road, Herndon, VA 20171 , US 
TUSA Michael, TUSA, Michael , 12 Mulberry Street, Ridgefield, CT 06877 , 
US 

Patent and Priority Information (Country, Number, Date) : 
Patent: WO 9915979 Al 19990401 

Application: WO 98US20170 19980925 (PCT/WO US9820170) 

Priority Application: US 9760655 19970926 
Designated States: AU BR CA JP MX SG AT BE CH CY DE DK ES FI FR GB GR IE IT 

LU MC NL PT SE 
Publication Language : English 
Filing Language: English 
Fulltext Word Count: 91547 



Fulltext Availability: 



Detailed Description 




Detailed Description 

... HTTPS request, adding an additional level of security to the overall 
process . 

As illustrated in Figure 2, after one of the DMZ Web servers 24 decrypts 

and verifies the user session, it forwards the message through a 
firewall 55 25b over a TCP/IP connection 23 to the dispatch server 26... 
2482 is available to designate this new query as the Default Q-iery. To 
retrieve a saved query, e.g., upon selection of the 50 "File /Open 
/Query" from the menu bar 2410, an "Aen Q — ery" window such as the exam 
le window 2485 s own in Figure 25(h) is... 
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Detailed Description 

... the form of fingerprints is known in the art. When a match is 
established, an encryption and decryption key associated with the 
matching data is automatically provided to an encryption and 
decryption system for encrypting files for storage and for decrypting 
files for access . When no match is established, the biometric input 
information is evaluated. 

When the biometric input information exceeds a predetermined threshold, a 
default key is automatically. . . 
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Claims 
English Abstract 

A machine system (100) for automatic decryption of confidential file 
data on a per-use basis and automatic later elimination of the 
decrypted data by scorching and/or re-encrypting is disclosed. The 
following features are provided for secure and automatic recryption : 
(1) use of f ile-exclusion lists; (2) use of application-program exclusion 
lists; (3) decrypting as needed in response to intercepted file -OPEN 
requests; (4) encrypting as needed in response to intercepted file 
-CLOSE requests; (5) delaying post-CLOSE encryption. 

Detailed Description 

... such 1 in-the-clear, time is also minimized. 

This is easily said. The technical problems, however, include questions 
such as: How does the machine system automatically determine if and 
when encryption , decryption or re-encryption of the data of a . 
particular one or more files is needed? How does the machine system carry 
out such functions without... 

...these functions carried out within the context of an operating system 
(OS) , especially a multi-threaded OS? What happens if the system 
administrator wishes to access secured files for backup or other 
administration related purposes? A third, previously-available security 
system answers . . . DOSm or MS-Windows' environment (both of the latter 
being trademarked products of Microsoft Corp. of Redmond, Wash.) . 

The SAFE 11 system maintains a so-called 'opened secured-f iles list, on 
which there is recorded a list of all files that have been opened and 
for whose data automatic decryption is to be carried out after each 
corresponding DOS READ operation and for which re-encryption is to be 
carried out before each corresponding DOS... 

...use the DOS file-READ or file-WRITE functions. 

Another drawback of the SAFETK system arises f rom the fact that each 
to-be-secured file must be positively listed in its 'opened secured- 
files list'. If a file name is inadvertently left off the list, that 
file escapes the automatic decrypt and re-encrypt functions of the 
SAFE" 1 system and the security of the system is thereby compromised. (A 
file may be inadvertently left off the opened secured-f iles list, 
for example, because of an error in the manually created 'encryption 
rules file,.) Yet another drawback of the SAFEm system arises from the 
fact ... temporarily posted onto a temporary exclusion list, 
one further, but important example of where a temporary exclusion list 
may be used is for excluding from automatic encryption , decryption 
and re-encryption , the so-called 'scratch' files that are created by 
the operations of the automatic encryption , decryption and -11 re- 
encryption procedures. (The automaticencryption , decryption and re- 
encryption procedures are otherwise, collectively, referred to herein as 
'on-the-fly recryption' or IOTF recryption'.) If, within 'on-the-fly 
recryption', each creation of a scratch file were allowed to itself 
automatically invoke another level of OTF encryption , decryption and 
re- encrypt ion, then an endlessly recursive process may undesirably 
develop within the machine. To prevent this from happening, scratch 
files that are created or opened by the operations of the OTF 
recryption procedures may be listed on an 'On-the-fly Temporary Exclusion 
List' (OTEL) . 



(2) Recrypt Exclusion Lists for Special Application ProcTrams A second 
feature in accordance with the invention deals with excluding from 
on-the-fly recryption 1 (from the automatic encryption , decryption 



and re-encryption prd^pbures) those file access reqrosts that are 
attributed to special application programs, such as backup programs, 
where use of the file can be constrained entirely to its encrypted form 



...permanent or temporary, exclude from on-the-fly recryption, list for 
programs can be created to correspondingly exclude on a permanent or 
temporary basis, from automatic recryption all f iles accessed by 
the listed special application programs without specifically listing 
those files . This is an alternative or supplement to using one of the 
Exclusion Lists for Files . 

-CIL Intercept File -CLOSE and File -OPEN Recruests A third feature 

in accordance with the invention is that first-time file encryption, and 

subsequent file re-encryptions, are preferably performed in response... 

...intercepted and corresponding file-OPEN requests issued by an authorized 
source (e.g., an authorized user) rather than in response to each 
intercepted and corresponding file -READ request. 

The File -CLOSE and file -OPEN requests are generally issued less 
frequently to ...and re-encryption are also performed less frequently. 
As a general rule, this has less of a negative impact on system 
performance speed than does automatic (but selective) decryption and 
re-encryption in response to each respective file-READ and file-WRITE 
request . 

A further facet of the second feature of the invention is that 
interception of file access request made by the file encryption 
process. As such, the attempted file encryption will fail and the file 
may escape the protection afforded by automatic encryption . 

To avoid such an undesirable consequence, provisions are made for 
intercepting the OS message respecting the failed encryption attempt and 
for re posting to a...M completes, the OS kernel 134 will be asked to 
'terminate, that application program. 

In accordance with the invention, the interceptable CALL'S to the file - 
OPEN and file -CLOSE services of the operating system are intercepted 

and acted upon to provide automatic and selective, 'on-the-fly 
recryption '. The interceptable CALL ! s to the program LAUNCH and 

program- TERMINATE services of the operating system are also intercepted 

and acted upon to provide specialized. . . 

Claim 

file-CLOSE requests Lzo31 to be sent to an operating system of said 
machine, and where data within a subset of the plurality of stored files 

is encrypted ; an automatic decryption control mechanism [2001 
comprising : 

(a) OPEN intercept means [2011 for intercepting said interceptable 
file -OPEN requests; (b) selective OPEN continuance means 
[2.10,212,2141 ...within the requested file into plaintext data. 

5. In an automated machine Lzoo] for executing one or more application 
programs [1701, where the application programs access file data of a 
plurality of stored files U53,.zal by causing interceptable file - 
OPEN requests Eiaz] and interceptable file -CLOSE requests [1831 to be 
sent to an operating system of said machine, and where data within a 
subset of the plurality of stored files is encrypted ; an automatic 
plaintext eliminating mechanism [4001 comprising: 

(a) CLOSE intercept means [4011 for intercepting said interceptable 
file-CLOSE requests; (b) selective CLOSE continuance means (4.20,4... 
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Detailed Description 

cost- effective to physically secure secondary storage 652 in many 
implementations, secondary storage 652 may be used to store information 
in a secure manner by encrypting information before storing it in 
secondary storage 652. If information is encrypted before it is stored, 
physical access to secondary storage 652 or its contents ... 500 . A host 
system hard disk secondary memory 652 used for general purpose file 
storage can, for example, also be used to store VDE management files 
610. 



SPU 500 may be given exclusive access to the external memory (e.g., 
over a local bus high speed connection provided by BILJ 530) . Both 
dedicated and shared external memory may be... to the smallest sub-element 
using a flexible control structure. ROS 602 can, for example, control the 
printing of a single paragraph out of a document file . 

ROS 602 provided by the preferred embodiment permits secure modification 
and update of control information governing each component. The control 
information may be provided in a template format such as method options 
to an end. . . 
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Detailed Description 

screening and examination software; password software, which 
identifies potential holes in network security by scanning user and 
supervisor accounts for known weak passwords and allows encryption ; 
auto logout software for inactive workstations; security and access 
auditing software, which allows auditing of specific users and 
workstations as well as directory and file access on the public 
network side, and also provides is encryption between similarly 
configured security services on user workstations. Preferably, software 
that allows simultaneous encryption and. . . 




8/3,K/ll (Item 9 from file: 349) 

DIALOG (R) File 349: PCT Fulltext 

(c) 2000 WIPO/MicroPat . All rts. reserv. 

00387590 

COMPUTER SYSTEM INCLUDING A TRANSPARENT AND SECURE FILE TRANSFORM MECHANISM 
SYSTEME INFORMAT IQUE COMPRENANT UN MECANISME DE TRANSFORMATION TRANSPARENTE 
ET SURE DE FICHIERS 

Patent Applicant /Assignee : 

HSU Mike Sheng Con 
Inventor ( s ) : 

HSU Mike Sheng Con 
Patent and Priority Information (Country, Number, Date) : 

Patent: WO 9518496 Al 19950706 

Application: WO 94US14486 19941215 (PCT/WO US9414486) 

Priority Application: US 93175192 19931227 
Designated States: AU CA JP AT BE CH DE DK ES FR GB GR IE IT LU MC NL PT SE 
Publication Language: English 
Fulltext Word Count: 10263 

Fulltext Availability: 
Detailed Description 

Detailed Description 

at the basic 1/0 system (BIOS) level of ap operating system. This 
routine provides for the simple selective re-vectoring of the lowest 
level file transfer BIOS functions, specifically the floppy diskette 
access operations, through asfile encryption routine. The entire file 
is automatically encrypted or decrypted when written or readsfrom, 
the diskette. In addition, a global "decryption flag, H is stored 
uniquely in the computer memory and not with the diskette. . . 
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Set Items Description 

51 82614 (OPEN? OR CHANG? OR EDIT? OR MODIF? OR ACCESS? OR READ? OR 

WRIT?) (10N) (DOCUMENT? OR FILE OR FILES) 

52 795673 AUTOMATIC? OR AUTO OR (WITHOUT OR NO OR "NOT" OR NON) (3N) (- 

HUMAN OR USER? ? OR OPERATOR?) (3N) (INTERVEN? OR INPUT? OR ACT- 
ION? OR ACTIVIT? OR INITIAT? OR REQUEST? OR COMMAND? OR INSTR- 
UCTION?) OR SUBROUTINE? OR SUB () ROUTINE? 

53 134709 ENCRYPT? OR DECRYPT? OR ENCIPHER? OR DECIPHER? OR ENCYPHER? 

OR DECYPHER? OR CYPHER? OR CIPHER? OR CRYPT? OR SECRET () KEY? ? 
OR KEY () VALUE? ? OR RECRYPT? OR RECIPHER? OR RECYPHER? 

54 18 SI AND S2(5N)S3 

55 18 RD (unique items) -^^M 

/ITS" X T Sb NOT CY, PY=1999: 2000 y *""" 

SI 0 AU= (MAHNE C? AND ZIZZI S? AND VON BURNS S? AND TOWNSLEY K?) 

58 6 AU= (MAHNE C? OR ZIZZI S? OR VON BURNS S? OR TOWNSLEY K?) 

59 0 S8 AND S2(S)S3 

510 0 S8 AND S3 

511 5 RD S8 (unique items) 



6/5/1 (Item 1 from l^a: 2) W 

* DIALOG (R) File 2:INSPEC 
<c) 2000 Institution of Electrical Engineers. All rts. reserv. 

03142518 INSPEC Abstract Number: C88035396 
Title: Technical evaluation of SecretDisk (encryption package) 

Author(s): Jackson, K. 

Journal: Computer Fraud & Security Bulletin vol.10, no. 2 p. 7-10 
Publication Date: Dec. 1987 Country of Publication: UK 
CODEN: CFSBEK ISSN: 0142-0496 

Language: English Document Type: Journal Paper (JP) 
Treatment: Practical (P); Product Review (R) 

Abstract: SecretDisk provides automatic encryption of files stored on 
a specially prepared area of a disk. SecretDisk addresses the problem: how 
to stop an unwanted person inspecting the contents of a disk. When 
initialized, SecretDisk constructs a hidden file on a disk, and provides 
the necessary device drivers to persuade the operating system that this is 
a new drive. Files stored by SecretDisk appear to come from a special drive 
where they are always stored in encrypted form. As all files on this drive 
are encrypted, the usual problem of securing temporary files and overlays 
does not exist. All data is encrypted before being written to file , and 
decrypted on retrieval from file . The only changes needed to the 
existing system are some special device drivers and the apparent existence 
of drives D: , E : , etc. Other features of this encryption package are 
evaluated. (0 Refs) 

Subfile: C 

Descriptors: cryptography; IBM computers; magnetic disc storage; software 
packages 

Identifiers: technical evaluation; disk protection; lattice; automatic 
encryption ; specially prepared area; unwanted person; SecretDisk; hidden 
file; device drivers; operating system; special drive; encrypted form; 
temporary files; decrypted; retrieval; encryption package 

Class Codes: C0310D (Installation management); C6130 (Data handling 
techniques ) 



6/5/2 (Item 2 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2000 Institution of Electrical Engineers. All rts. reserv. 

02407025 INSPEC Abstract Number: C85016252 
Title : WordPerfect 
Author(s): Birmele, R. 

Journal: BYTE vol.9, no. 13 p. 277-88 

Publication Date: Dec. 1984 Country of Publication: USA 

CODEN: BYTEDJ ISSN: 0360-5280 

Language: English Document Type: Journal Paper (JP) 
Treatment: Practical (P) ; Product Review (R) 

Abstract: WordPerfect runs on the IBM PC (and its clones), the Victor 
9000, the DEC Rainbow 100, the Zenith Z-100, and the Tandy 2000. 
WordPerfect is actually a collection of several closely integrated 
programs, including a bundled 30000-word dictionary with room for 10000 
user-included words, and extensive mathematical and merge functions. It 
provides automatic text reformatting, automatic footnotes, proportional 
spacing, document encryption , and macro instructions. The package comes 
on two non-copy-protected disks: one contain the program and supporting 
files and the other contains the dictionary. A comprehensive, well- 
written tutorial/reference-style manual is also included. (0 Refs) 
Subfile: C 

Descriptors: microcomputer applications; software packages; word 
processing 

Identifiers: mathematical functions; word processing package; IBM PC- 
Victor 9000; DEC Rainbow 100; Zenith Z-100; Tandy 2000; WordPerfect; 
integrated programs; dictionary; merge functions; automatic text 
reformatting; automatic footnotes; proportional spacing; document 
encryption; macro instructions; manual 

Class Codes: C7106 (Word processing) 



6/5/3 (Item 3 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2000 Institution of Electrical Engineers. All rts. reserv. 

02270640 INSPEC Abstract Number: C84030551 
Title: Data processing security 
Author(s): Cros, J.-F. 

Journal: Mesures vol.49, no. 4 p. 21-5 

Publication Date: 19 March 1984 Country of Publication: France 
CODEN: MSRSET ISSN: 0755-219X 

Language: French Document Type: Journal Paper (JP) 
Treatment: Practical (P) 

Abstract: The vulnerability of computer systems to fraudulent 
manipulation is highlighted and the problems of data protection are 
categorised under the headings of continuity, confidentiality and 
integrity. The causes and consequences of mains power supply disturbances 
are tabulated. Different levels of protection appropriate to large personal 
data banks and business management files are discussed. Safety measures 
mentioned include physical access control and storage protection, 
automatic identification and passwords, encryption , and software 
separation of sensitive information with complex coding at the various 
levels of software. Program piracy and countermeasures are mentioned and 
the Data Encryption Standard for secure transmission is outlined. (0 Refs) 

Subfile: C 

Descriptors: security of data 

Identifiers: data processing security; computer systems; data protection; 
business management files; physical access control; automatic 
identification; passwords; encryption; software separation 

Class Codes: C6130 {Data handling techniques) 



6/5/4 (Item 1 from file: 8) 

DIALOG (R) File 8 : Ei Compendex(R) 

(c) 2000 Engineering Info. Inc. All rts. reserv. 

03919921 E.I. No: EIP94 011191057 
Title: Cryptographic file system for Unix 

Author: Blaze, Matt 

Corporate Source: AT&T Bell Lab, Holmdel, NJ, USA 

Conference Title: Proceedings of the 1st ACM Conference on Computer and 
Communications Security 

Conference Location: Fairfax, VA, USA Conference Date: 

19931103-19931105 

Sponsor: ACM SIGSAC 

E.I. Conference No.: 19817 

Source: 1st ACM Conference on Computer and Communications Security Proc 
1st ACM Conf Comput Commun Secur 1993. Publ by ACM, New York, NY, USA. p 
9-16 

Publication Year: 1993 
ISBN: 0-89791-629-8 
Language: English 

Document Type: CA; (Conference Article) Treatment: T; (Theoretical) 
Journal Announcement: 94 09W5 

Abstract: Although cryptographic techniques are playing an increasingly 
important role in modern computing system security, user-level tools for 
encrypting file data are cumbersome and suffer from a number of inherent 
vulnerabilities. The Cryptographic File System (CFS) pushes encryption 
services into the file system itself. CFS supports secure storage at the 
system level through a standard Unix file system interface to encrypted 
files. Users associate a cryptographic key with the directories they wish 
to protect. Files in these directories (as well as their pathname 
components) are transparently encrypted and decrypted with the specified 
key without further user intervention ; cleartext is never stored on a 
disk or sent to a remote file server. CFS can use any available file 
system for its underlying storage without modification , including remote 
file servers such as NFS. System management functions, such as file 
backup, work in a normal manner and without knowledge of the key. This 



paper describes the desi^Jand implementation of CFS undel^Pnix. Encryption 
techniques for file system-level encryption are described, and general 
issues of cryptographic system interfaces to support routine secure 
computing are discussed. (Author abstract) 8 Refs. 

Descriptors: *File organization; Cryptography; UNIX; Security of data; 
User interfaces; Data storage equipment; Computer systems; Data processing; 
Algorithms; Computer software 

Identifiers: Cryptographic file systems; System management functions; 
File backup; File system level encrypton 

Classification Codes: 

723.2 (Data Processing); 722.3 (Data Communication, Equipment & 
Techniques); 722.1 (Data Storage, Equipment & Techniques); 723.1 
(Computer Programming) 

723 (Computer Software); 722 (Computer Hardware) 

72 (COMPUTERS & DATA PROCESSING) 



6/5/5 (Item 1 from file: 99) 

DIALOG (R) File 99: Wilson Appl . Sci & Tech Abs 
(c) 2000 The HW Wilson Co. All rts. reserv. 

1313472 H.W. WILSON RECORD NUMBER: BAST96018757 
Crypto Backup and key escrow 

Maher, David Paul; 

Communications of the ACM v. 39 (Mar. '96) p. 48-53 

DOCUMENT TYPE: Feature Article ISSN: 0001-0782 LANGUAGE: English 
RECORD STATUS: Corrected or revised record 

ABSTRACT: Part of a special section on key escrow systems. A new 
automatic backup mechanism for cryptographic keys is described. The 
proposed method is able to recover keys that have been lost, destroyed, or 
withheld from legitimate access. In addition, it has the advantages of 
being usable for message keys as well as for file and session keys and 
being sufficiently flexible to support a variety of trust models and 
cryptographic policies. The straightforward method for diluting trust in 
the system means that backup agents do not need to reconstruct a key or 
have access to recovered files . In addition, the method can be 
implemented in software and hardware and can be extended to key escrow 
applications in which the law enforcement concerns are of great importance. 
The implementation of a corporatewide policy requiring users to retain 
reasonable control over the backup process while meeting the concerns of 
law enforcement is suggested. System scenarios, components, properties, 
and technical details are also described. 

DESCRIPTORS: Cryptographic keys; 



6/5/6 (Item 1 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs. 
(c) 2000 Info. Today Inc. All rts. reserv. 

00516424 98PM12-016 

Watch your back — SecureWin Technologies SecureWin Desktop 2 . 0 

Bass, Gordon 

PC Computing , December 1, 1998 , vll nl2 pl36, 1 Page(s) 
ISSN: 0899-1847 

Company Name: SecureWin Technologies 
Product Name: SecureWin Desktop 2.0 
Languages : English 
Document Type: Software Review 
Grade (of Product Reviewed) : B 

Hardware/Software Compatibility: IBM PC Compatible 
Geographic Location: United States 

Presents a favorable review of SecureWin Desktop 2.0 ($50 street), file 
encryption software for IBM PC compatibles from SecureWin Technologies 
(800) . Features secure booting with password protection, multiple security 
accounts (with varying levels of access for different people), and 
automatic file encryption and decryption . Provides a self-destruct 



feature that deletes ^PFes automatically when someonHinters the wrong 
password a prescribe number of times. Offers encrypted e-mail for mail 
programs tha support S/MIME. Concludes that SecureWin Desktop 2.0 provides 
comprehensive security for almost any PC use. Rated four out of f stars. 
Contains one screen display and one product summary guide. (HHW) 

Descriptors: Security; File Management; Encryption; Electronic Mail 
Identifiers: SecureWin Desktop 2.0; SecureWin Technologies 



6/5/7 (Item 2 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs . 
(c) 2000 Info. Today Inc. All rts. reserv. 

00508226 98SA09-002 

All around network security that delivers -- Secure and manage your 
Windows NT laptops and workstations with AXENT Technologies 
OmniGuard/PCShield 2.0, which provides... 

Kawamoto, Wayne N 

Security Advisor , September 1, 1998 , vl n3 p24-27, 3 Page(s) 
ISSN: 1095-2942 

Company Name: AXENT Technologies 

URL : http : / /www . axent . com 

Product Name: OmniGuard/PCShield 2.0 

Languages : English 

Document Type: Software Review 

Grade (of Product Reviewed) : B 

Hardware/Software Compatibility: IBM PC Compatible; Microsoft Windows 
95; Microsoft Windows NT 

Geographic Location : United States 

Presents a favorable review of OmniGuard/PCShield 2.0 ($89 per - 
workstation), a file encryption program from AXENT Technologies, Inc. of 
Rockville, MD (800, 301). Runs on IBM PC compatibles with Windows 95 or 
Windows NT. Explains that this software offers control over file and 
program access , and provides encryption and lockout tools to prevent 
unauthorized data access. Adds that OmniGuard/PCShield 1 s security methods 
are transparent to users, automatically apply encryption , and handle 

file and application access . Notes that the program's security database 
tracks all the information relating to user accounts, group profiles, file 
a and audit settings . Reports that PCShield provides impressive, 
comprehensive security coverage. Adds that it has understandable 
administrator tools and it offers multiple levels of encryption. However, 
says OmniGuard/PCShield needs wizards for easier setup. Includes two screen 
displays, (jo) 

Descriptors: Encryption; Cryptology; Security; Disk Files; Network 
Management; Administration; Networks 

Identifiers: OmniGuard/PCShield 2.0; AXENT Technologies 



6/5/8 (Item 3 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs. 
(c) 2000 Info. Today Inc. All rts. reserv. 

00480994 97IE12-007 

Tales from the (en) crypt PGP for Personal Privacy 5.0 

Loeb, Larry 

Internet World , December 1, 1997 , v8 nl2 p46, 1 Page(s) 
ISSN: 1081-3071 

Company Name: Pretty Good privacy 
URL : http : //www . pgp . com 

Product Name: PGP for Personal Privacy 5.0 

Languages : English 

Document Type : Software Review 

Grade (of Product Reviewed) : A 

Hardware/Software Compatibility: IBM PC Compatible; Microsoft Windows 
95; Microsoft Windows NT; Macintosh 
Geographic Location: United States 

Presents a very favorable review of PGP for Personal Privacy 5.0 ($69; 
$49 online), an upgrade to the Pretty Good Privacy encryption software from 



Pretty Good Privacy I^p (650) . Explains that the prog^Pi is designed to 
automatically encrypt documents for transmission over unsecured 

networks and/or the Internet. Adds that it is also capable of validating 
the identity of the sender. Calls it a simple, easy to use process. Notes 
that the documentation is well-written and easy to understand. Reports 
no significant complaints. Mentions that a competing product is expected to 
be released shortly. Concludes that this "is a major enhancement to an 
already useful utility and well worth the purchase price. ' ' Includes one 
screen display and one product summary, (kgh) 

Descriptors: Security; Cryptology; Data Transmission; Privacy 
Identifiers: PGP for Personal Privacy 5.0; Pretty Good privacy 



6/5/9 (Item 4 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs . 
(c) 2000 Info. Today Inc. All rts. reserv. 

00477142 97IE11-006 

Backing up on the Web -- Atrieva 1.0 

Stevenson, Ted 

Internet World , November 1, 1997 , v8 nil p46-48, 2 Page(s) 

ISSN: 1064-3923 

Company Name: Atrieva 

Product Name: Atrieva 1.0 

Languages : English 

Document Type : Software Review 

Grade (of Product Reviewed) : B 

Hardware/Software Compatibility: IBM PC Compatible; Microsoft Windows 
95; Microsoft Windows NT 

Geographic Location: United States 

Presents a favorable review of Atrieva 1.0 {$14.95 per month), an 
Internet-based backup and file repository service from Atrieva Corp. (888, 
206) . Explains that this service provides a remote backup site for files to 
be stored and retrieved from any location. Claims that it provides an 
easy-to-use secure backup system with unlimited storage capacity and easy 
retrieval. Includes automatic virus scans and data encryption , as well 
as scheduled backup routines. Points out that it is a good alternate 
storage system for use with laptop computers, or for someone who needs 

access to the same files on both a desktop and a laptop on the road. 
Complains that backup and retrieval times can be adversely affected by the 
amount of traffic on the Internet at the time and performance can depend on 
the status of the user's Internet service. Concludes that this is a good 
backup alternative. Includes one screen display and one product summary, 
(kgh) 

Descriptors : Backup; Internet ; Information Storage; Information 
Retrieval; Remote Computing; Lap-sized Microcomputer; Cryptology 
Identifiers: Atrieva 1.0; Atrieva 



6/5/10 (Item 5 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs. 
(c) 2000 Info. Today Inc. All rts. reserv. 

00474081 97DW10-007 

Put your personal data under lock and key -- PCCrypto from McAfee 
quickly provides protection for your desktop data and e-mail 

Cobb, Michael 

Databased Web Advisor , October 1, 1997 , vl5 nlO p72-75, 4 Page{s) 

Company Name: McAfee Associates 

Product Name: PCCrypto 1.0.1 for Windows 

Languages : English 

Document Type : Software Review 

Grade {of Product Reviewed) : B 

Hardware/Software Compatibility: IBM PC Compatible; Microsoft Windows 
Geographic Location: United States 

Presents a favorable review of PCCrypto 1.0.1 for Windows ($65), an 
encryption program from McAfee Associates of Santa Clara, CA (408) . Says it 
is a general-purpose tool that protects data and e-mail correspondence. 



Adds that it creates ^lf-extracting encrypted files, wcrypts clipboard 
data, and comes with a wipe function that is a must for anyone who is 
serious about data security. However, says it lacks an auto -encrypt 
facility, and its encrypted files cannot be opened from Explorer. 
Calls it very functional. Includes three screen displays, a summary card, 
and a report card, (dpm) 

Descriptors: Cryptology; Electronic Mail; Security; File Management 
Identifiers: PCCrypto 1.0.1 for Windows; McAfee Associates 



6/5/11 (Item 6 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs . 
(c) 2000 Info. Today Inc. All rts. reserv. 

00439143 96IW10-222 

A look into Your Eyes Only file protection system — Despite no 
individual file protection, its strong cryptography a good start 

Peschel, Joe 

InfoWorld , October 21, 1996 , vl8 n43 p97, 1 Page(s) 
ISSN: 0199-6649 
Company Name: Symantec 

Product Name: For Your Eyes Only 4.0 for Windows 95 

Languages : English 

Document Type: Software Review 

Grade (of Product Reviewed) : B 

Hardware/Software Compatibility: IBM PC Compatible; Microsoft Windows 

95 

Geographic Location: United States 

Presents a favorable review of Your Eyes Only 4.0 for Windows 95 ($90), 
a security utility program from Symantec Corp. of Cupertino, CA (800, 541) . 
Says it provides an assortment of strong cryptographic algorithms as sell 
as a mechanism that can block unauthorized access to files. Adds that it 
supports several users, has automatic file encryption and decryption 
, and can securely wipe files . However, says it lacks solid individual 
file read /write protection, could have stronger secure delete, and 

its BookLock function can be bypassed. Calls it a good security tool. 
Includes a screen display, a chart, and a summary card, (dpm) 

Descriptors: Security; Software Review; Window Software; File 
Management; Cryptology; Utility Program 

Identifiers: For Your Eyes Only 4.0 for Windows 95; Symantec 



6/5/12 (Item 7 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs. 
(c) 2000 Info. Today Inc. All rts. reserv. 

00438742 96PM10-015 

Keep your data to yourself 

Polito, Julie 

PC/Computing , October 1, 1996 , v9 nlO p98, 1 Page(s) 

ISSN: 0899-1847 

Company Name : Symantec 

Product Name: Your Eyes Only 

Languages : English 

Document Type : Software Review 

Grade (of Product Reviewed) : B 

Hardware/Software Compatibility: Microsoft Windows; 486-based PC 
Geographic Location : United States 

Presents a favorable review of Symantec Norton Your Eyes Only ($89) , a 
security program from Symantec Corp. (800) . The program secures everything 
on the user's system. It provides a BootLock feature which requires a 
password to start the system and its ScreenLock features asks for the 
password again after a set amount of system inactivity. It can encrypt or 
decrypt files using RSA encryption and its SmartLock folder provides 
automatic encryption and decryption of files each time they are 

opened or closed. The entire program is customizable and it produces an 
emergency disk which the user can use in the event he or she forgets the 
password. The program does not provide auto -encryption of shared 



drives but other wise^ rovides complete security for ^as and system 

access . The program requires a 4 68-based PC or better with 8MB RAM, 6MB 
hard disk space, and Windows 95. Includes one screen display. <djd) 

Descriptors: Security; Software; Window Software 

Identifiers: Your Eyes Only; Symantec 



6/5/13 (Item 8 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs . 
(c) 2000 Info. Today Inc. All rts. reserv. 

00328058 93BY10-018 

DataEase for Windows 1.1 — Personal databases 

Trask, Matt; Sorensen, Don 

BYTE , October 1, 1993 , vl8 nil pl27, 1 Page(s) 
ISSN: 0360-5280 

Company Name: DataEase International 

Product Name: DataEase Express for Windows 

Languages: English 

Document Type: Software Review 

Grade (of Product Reviewed) : B 

Hardware/Software Compatibility: Microsoft Windows 
Geographic Location: United States 

Presents a favorable review of DataEase Express for Windows 1.1 ($395), 
a personal database from DataEase International Inc. of Trumbull, CT (203) . 
Runs on 80286-based or better machines with 2MB of RAM or more, a mouse, 
Windows, and 6MB of hard drive space. Says DataEase Express for Windows 
features password protection, file encryption , read -only fields, 

automatic record locking, and DDE and OLE support. Also says the program 
allows for wild card searches and searches with Soundex references. 
Includes a photo and a screen display, (tbc) 

Descriptors: Data Base Management; Software Review; Window Software 
Identifiers: DataEase Express for Windows; DataEase International 



6/5/14 (Item 9 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs. 
(c) 2000 Info. Today Inc. All rts. reserv. 

00312808 93PK05-330 

New PIMs tout next-generation features — Jenson- Jones 1 Commence gains 
network links, database- synchronization features 

Bowen, Ted Smalley 

PC WEEK , May 17, 1993 , vlO nl9 p24, 1 Page(s) 

ISSN: 0740-1604 

Company Name: Jensen- Jones 

Product Name : Commence 

Languages: English 

Document Type: Product Announcement 
Geographic Location: United States 

Reports that Jensen-Jones of Red Bank, NJ, announced the release of 
Commence 2.0 ($395), a high-end personal information manager. Says that 
Commence allows users to share files among networked PCs running Novell's 
NetWare, Artisoft's LANtastic, and Microsoft's Windows for Workgroups. 
Includes SyncLink, a utility that creates a compressed, encrypted file 

of the changes and automatically routes it to designated Commence 
databases, (cnr) 

Descriptors: Personal Information Manager; Networks; Window Software 
Identifiers: Commence; Jensen-Jones 



6/5/15 (Item 10 from file: 233) 

DIALOG { R) File 233: Internet & Personal Comp. Abs. 
(c) 2000 Info. Today Inc. All rts. reserv. 



00194287 89MW06-024 
Empower 2 . 0 
Stevens, Lawrence 



it is not copy protectd^P Says that it requires 128K RAi^^bne floppy disk 
* drive, one hard disk drive, and DOS 2 . 0 or later. Editor's Choice. 
Descriptors: SECURITY; SOFTWARE REVIEW 
Identifiers: Protec; Sophco; IBM 
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